FilesExpand file tree

develop

/

stories

/

Copy path

Directory actions

More options

More options

Directory actions

More options

More options

Latest commit

 

History

History

History

 

 

develop

/

stories

/

Copy path

Top

Folders and files

Name		Name	Last commit message	Last commit date
parent directory ..
apache_struts_vulnerability.yml		apache_struts_vulnerability.yml
asset_tracking.yml		asset_tracking.yml
aws_cross_account_activity.yml		aws_cross_account_activity.yml
aws_cryptomining.yml		aws_cryptomining.yml
aws_network_acl_activity.yml		aws_network_acl_activity.yml
aws_security_hub_alerts.yml		aws_security_hub_alerts.yml
aws_suspicious_provisioning_activities.yml		aws_suspicious_provisioning_activities.yml
aws_user_monitoring.yml		aws_user_monitoring.yml
brand_monitoring.yml		brand_monitoring.yml
cloud_cryptomining.yml		cloud_cryptomining.yml
coldroot_macos_rat.yml		coldroot_macos_rat.yml
collection_and_staging.yml		collection_and_staging.yml
command_and_control.yml		command_and_control.yml
common_phishing_frameworks.yml		common_phishing_frameworks.yml
container_implantation_monitoring_and_investigation.yml		container_implantation_monitoring_and_investigation.yml
credential_dumping.yml		credential_dumping.yml
data_exfiltration.yml		data_exfiltration.yml
data_protection.yml		data_protection.yml
detect_zerologon_attack.yml		detect_zerologon_attack.yml
dhs_report_ta18_074a.yml		dhs_report_ta18_074a.yml
disabling_security_tools.yml		disabling_security_tools.yml
dns_amplification_attacks.yml		dns_amplification_attacks.yml
dns_hijacking.yml		dns_hijacking.yml
dynamic_dns.yml		dynamic_dns.yml
emotet_malware__dhs_report_ta18_201a_.yml		emotet_malware__dhs_report_ta18_201a_.yml
f5_tmui_rce_cve_2020_5902.yml		f5_tmui_rce_cve_2020_5902.yml
gcp_cross_account_activity.yml		gcp_cross_account_activity.yml
hidden_cobra_malware.yml		hidden_cobra_malware.yml
host_redirection.yml		host_redirection.yml
jboss_vulnerability.yml		jboss_vulnerability.yml
kubernetes_scanning_activity.yml		kubernetes_scanning_activity.yml
kubernetes_sensitive_object_access_activity.yml		kubernetes_sensitive_object_access_activity.yml
kubernetes_sensitive_role_activity.yml		kubernetes_sensitive_role_activity.yml
lateral_movement.yml		lateral_movement.yml
malicious_powershell.yml		malicious_powershell.yml
monitor_backup_solution.yml		monitor_backup_solution.yml
monitor_for_unauthorized_software.yml		monitor_for_unauthorized_software.yml
monitor_for_updates.yml		monitor_for_updates.yml
netsh_abuse.yml		netsh_abuse.yml
office_365_detections.yml		office_365_detections.yml
orangeworm_attack_group.yml		orangeworm_attack_group.yml
phishing_payloads.yml		phishing_payloads.yml
possible_backdoor_activity_associated_with_mudcarp_espionage_campaigns.yml		possible_backdoor_activity_associated_with_mudcarp_espionage_campaigns.yml
prohibited_traffic_allowed_or_protocol_mismatch.yml		prohibited_traffic_allowed_or_protocol_mismatch.yml
ransomware.yml		ransomware.yml
ransomware_cloud.yml		ransomware_cloud.yml
ransomware_ryuk.yml		ransomware_ryuk.yml
ransomware_samsam.yml		ransomware_samsam.yml
router_and_infrastructure_security.yml		router_and_infrastructure_security.yml
spectre_and_meltdown_vulnerabilities.yml		spectre_and_meltdown_vulnerabilities.yml
splunk_enterprise_vulnerability.yml		splunk_enterprise_vulnerability.yml
splunk_enterprise_vulnerability_cve_2018_11409.yml		splunk_enterprise_vulnerability_cve_2018_11409.yml
sql_injection.yml		sql_injection.yml
sunburst_malware.yml		sunburst_malware.yml
suspicious_aws_ec2_activities.yml		suspicious_aws_ec2_activities.yml
suspicious_aws_login_activities.yml		suspicious_aws_login_activities.yml
suspicious_aws_s3_activities.yml		suspicious_aws_s3_activities.yml
suspicious_aws_traffic.yml		suspicious_aws_traffic.yml
suspicious_cloud_authentication_activities.yml		suspicious_cloud_authentication_activities.yml
suspicious_cloud_instance_activities.yml		suspicious_cloud_instance_activities.yml
suspicious_cloud_provisioning_activities.yml		suspicious_cloud_provisioning_activities.yml
suspicious_cloud_user_activities.yml		suspicious_cloud_user_activities.yml
suspicious_command_line_executions.yml		suspicious_command_line_executions.yml
suspicious_dns_traffic.yml		suspicious_dns_traffic.yml
suspicious_emails.yml		suspicious_emails.yml
suspicious_gcp_storage_activities.yml		suspicious_gcp_storage_activities.yml
suspicious_mshta_activity.yml		suspicious_mshta_activity.yml
suspicious_okta_activity.yml		suspicious_okta_activity.yml
suspicious_windows_registry_activities.yml		suspicious_windows_registry_activities.yml
suspicious_wmi_use.yml		suspicious_wmi_use.yml
suspicious_zoom_child_processes.yml		suspicious_zoom_child_processes.yml
unusual_aws_ec2_modifications.yml		unusual_aws_ec2_modifications.yml
unusual_processes.yml		unusual_processes.yml
use_of_cleartext_protocols.yml		use_of_cleartext_protocols.yml
web_fraud_detection.yml		web_fraud_detection.yml
windows_defense_evasion_tactics.yml		windows_defense_evasion_tactics.yml
windows_dns_sigred_cve_2020_1350.yml		windows_dns_sigred_cve_2020_1350.yml
windows_file_extension_and_association_abuse.yml		windows_file_extension_and_association_abuse.yml
windows_log_manipulation.yml		windows_log_manipulation.yml
windows_persistence_techniques.yml		windows_persistence_techniques.yml
windows_privilege_escalation.yml		windows_privilege_escalation.yml
windows_service_abuse.yml		windows_service_abuse.yml
View all files