FilesExpand file tree

develop

/

cloud

/

Copy path

Directory actions

More options

More options

Directory actions

More options

More options

Latest commit

 

History

History

History

 

 

develop

/

cloud

/

Copy path

Top

Folders and files

Name		Name	Last commit message	Last commit date
parent directory ..
amazon_eks_kubernetes_cluster_scan_detection.yml		amazon_eks_kubernetes_cluster_scan_detection.yml
amazon_eks_kubernetes_pod_scan_detection.yml		amazon_eks_kubernetes_pod_scan_detection.yml
asl_aws_concurrent_sessions_from_different_ips.yml		asl_aws_concurrent_sessions_from_different_ips.yml
asl_aws_create_access_key.yml		asl_aws_create_access_key.yml
asl_aws_create_policy_version_to_allow_all_resources.yml		asl_aws_create_policy_version_to_allow_all_resources.yml
asl_aws_credential_access_getpassworddata.yml		asl_aws_credential_access_getpassworddata.yml
asl_aws_credential_access_rds_password_reset.yml		asl_aws_credential_access_rds_password_reset.yml
asl_aws_defense_evasion_delete_cloudtrail.yml		asl_aws_defense_evasion_delete_cloudtrail.yml
asl_aws_defense_evasion_delete_cloudwatch_log_group.yml		asl_aws_defense_evasion_delete_cloudwatch_log_group.yml
asl_aws_defense_evasion_impair_security_services.yml		asl_aws_defense_evasion_impair_security_services.yml
asl_aws_defense_evasion_putbucketlifecycle.yml		asl_aws_defense_evasion_putbucketlifecycle.yml
asl_aws_defense_evasion_stop_logging_cloudtrail.yml		asl_aws_defense_evasion_stop_logging_cloudtrail.yml
asl_aws_defense_evasion_update_cloudtrail.yml		asl_aws_defense_evasion_update_cloudtrail.yml
asl_aws_detect_users_creating_keys_with_encrypt_policy_without_mfa.yml		asl_aws_detect_users_creating_keys_with_encrypt_policy_without_mfa.yml
asl_aws_disable_bucket_versioning.yml		asl_aws_disable_bucket_versioning.yml
asl_aws_ec2_snapshot_shared_externally.yml		asl_aws_ec2_snapshot_shared_externally.yml
asl_aws_ecr_container_upload_outside_business_hours.yml		asl_aws_ecr_container_upload_outside_business_hours.yml
asl_aws_ecr_container_upload_unknown_user.yml		asl_aws_ecr_container_upload_unknown_user.yml
asl_aws_iam_accessdenied_discovery_events.yml		asl_aws_iam_accessdenied_discovery_events.yml
asl_aws_iam_assume_role_policy_brute_force.yml		asl_aws_iam_assume_role_policy_brute_force.yml
asl_aws_iam_delete_policy.yml		asl_aws_iam_delete_policy.yml
asl_aws_iam_failure_group_deletion.yml		asl_aws_iam_failure_group_deletion.yml
asl_aws_iam_successful_group_deletion.yml		asl_aws_iam_successful_group_deletion.yml
asl_aws_multi_factor_authentication_disabled.yml		asl_aws_multi_factor_authentication_disabled.yml
asl_aws_network_access_control_list_created_with_all_open_ports.yml		asl_aws_network_access_control_list_created_with_all_open_ports.yml
asl_aws_network_access_control_list_deleted.yml		asl_aws_network_access_control_list_deleted.yml
asl_aws_new_mfa_method_registered_for_user.yml		asl_aws_new_mfa_method_registered_for_user.yml
asl_aws_saml_update_identity_provider.yml		asl_aws_saml_update_identity_provider.yml
asl_aws_updateloginprofile.yml		asl_aws_updateloginprofile.yml
aws_ami_attribute_modification_for_exfiltration.yml		aws_ami_attribute_modification_for_exfiltration.yml
aws_bedrock_delete_guardrails.yml		aws_bedrock_delete_guardrails.yml
aws_bedrock_delete_knowledge_base.yml		aws_bedrock_delete_knowledge_base.yml
aws_bedrock_delete_model_invocation_logging_configuration.yml		aws_bedrock_delete_model_invocation_logging_configuration.yml
aws_bedrock_high_number_list_foundation_model_failures.yml		aws_bedrock_high_number_list_foundation_model_failures.yml
aws_bedrock_invoke_model_access_denied.yml		aws_bedrock_invoke_model_access_denied.yml
aws_concurrent_sessions_from_different_ips.yml		aws_concurrent_sessions_from_different_ips.yml
aws_console_login_failed_during_mfa_challenge.yml		aws_console_login_failed_during_mfa_challenge.yml
aws_create_policy_version_to_allow_all_resources.yml		aws_create_policy_version_to_allow_all_resources.yml
aws_createaccesskey.yml		aws_createaccesskey.yml
aws_createloginprofile.yml		aws_createloginprofile.yml
aws_credential_access_failed_login.yml		aws_credential_access_failed_login.yml
aws_credential_access_getpassworddata.yml		aws_credential_access_getpassworddata.yml
aws_credential_access_rds_password_reset.yml		aws_credential_access_rds_password_reset.yml
aws_defense_evasion_delete_cloudtrail.yml		aws_defense_evasion_delete_cloudtrail.yml
aws_defense_evasion_delete_cloudwatch_log_group.yml		aws_defense_evasion_delete_cloudwatch_log_group.yml
aws_defense_evasion_impair_security_services.yml		aws_defense_evasion_impair_security_services.yml
aws_defense_evasion_putbucketlifecycle.yml		aws_defense_evasion_putbucketlifecycle.yml
aws_defense_evasion_stop_logging_cloudtrail.yml		aws_defense_evasion_stop_logging_cloudtrail.yml
aws_defense_evasion_update_cloudtrail.yml		aws_defense_evasion_update_cloudtrail.yml
aws_detect_users_creating_keys_with_encrypt_policy_without_mfa.yml		aws_detect_users_creating_keys_with_encrypt_policy_without_mfa.yml
aws_detect_users_with_kms_keys_performing_encryption_s3.yml		aws_detect_users_with_kms_keys_performing_encryption_s3.yml
aws_disable_bucket_versioning.yml		aws_disable_bucket_versioning.yml
aws_ec2_snapshot_shared_externally.yml		aws_ec2_snapshot_shared_externally.yml
aws_ecr_container_scanning_findings_high.yml		aws_ecr_container_scanning_findings_high.yml
aws_ecr_container_scanning_findings_low_informational_unknown.yml		aws_ecr_container_scanning_findings_low_informational_unknown.yml
aws_ecr_container_scanning_findings_medium.yml		aws_ecr_container_scanning_findings_medium.yml
aws_ecr_container_upload_outside_business_hours.yml		aws_ecr_container_upload_outside_business_hours.yml
aws_ecr_container_upload_unknown_user.yml		aws_ecr_container_upload_unknown_user.yml
aws_excessive_security_scanning.yml		aws_excessive_security_scanning.yml
aws_exfiltration_via_anomalous_getobject_api_activity.yml		aws_exfiltration_via_anomalous_getobject_api_activity.yml
aws_exfiltration_via_batch_service.yml		aws_exfiltration_via_batch_service.yml
aws_exfiltration_via_bucket_replication.yml		aws_exfiltration_via_bucket_replication.yml
aws_exfiltration_via_datasync_task.yml		aws_exfiltration_via_datasync_task.yml
aws_exfiltration_via_ec2_snapshot.yml		aws_exfiltration_via_ec2_snapshot.yml
aws_high_number_of_failed_authentications_for_user.yml		aws_high_number_of_failed_authentications_for_user.yml
aws_high_number_of_failed_authentications_from_ip.yml		aws_high_number_of_failed_authentications_from_ip.yml
aws_iam_accessdenied_discovery_events.yml		aws_iam_accessdenied_discovery_events.yml
aws_iam_assume_role_policy_brute_force.yml		aws_iam_assume_role_policy_brute_force.yml
aws_iam_delete_policy.yml		aws_iam_delete_policy.yml
aws_iam_failure_group_deletion.yml		aws_iam_failure_group_deletion.yml
aws_iam_successful_group_deletion.yml		aws_iam_successful_group_deletion.yml
aws_lambda_updatefunctioncode.yml		aws_lambda_updatefunctioncode.yml
aws_multi_factor_authentication_disabled.yml		aws_multi_factor_authentication_disabled.yml
aws_multiple_failed_mfa_requests_for_user.yml		aws_multiple_failed_mfa_requests_for_user.yml
aws_multiple_users_failing_to_authenticate_from_ip.yml		aws_multiple_users_failing_to_authenticate_from_ip.yml
aws_network_access_control_list_created_with_all_open_ports.yml		aws_network_access_control_list_created_with_all_open_ports.yml
aws_network_access_control_list_deleted.yml		aws_network_access_control_list_deleted.yml
aws_new_mfa_method_registered_for_user.yml		aws_new_mfa_method_registered_for_user.yml
aws_password_policy_changes.yml		aws_password_policy_changes.yml
aws_s3_exfiltration_behavior_identified.yml		aws_s3_exfiltration_behavior_identified.yml
aws_saml_update_identity_provider.yml		aws_saml_update_identity_provider.yml
aws_setdefaultpolicyversion.yml		aws_setdefaultpolicyversion.yml
aws_successful_console_authentication_from_multiple_ips.yml		aws_successful_console_authentication_from_multiple_ips.yml
aws_successful_single_factor_authentication.yml		aws_successful_single_factor_authentication.yml
aws_unusual_number_of_failed_authentications_from_ip.yml		aws_unusual_number_of_failed_authentications_from_ip.yml
aws_updateloginprofile.yml		aws_updateloginprofile.yml
azure_active_directory_high_risk_sign_in.yml		azure_active_directory_high_risk_sign_in.yml
azure_ad_admin_consent_bypassed_by_service_principal.yml		azure_ad_admin_consent_bypassed_by_service_principal.yml
azure_ad_application_administrator_role_assigned.yml		azure_ad_application_administrator_role_assigned.yml
azure_ad_authentication_failed_during_mfa_challenge.yml		azure_ad_authentication_failed_during_mfa_challenge.yml
azure_ad_azurehound_useragent_detected.yml		azure_ad_azurehound_useragent_detected.yml
azure_ad_block_user_consent_for_risky_apps_disabled.yml		azure_ad_block_user_consent_for_risky_apps_disabled.yml
azure_ad_concurrent_sessions_from_different_ips.yml		azure_ad_concurrent_sessions_from_different_ips.yml
azure_ad_device_code_authentication.yml		azure_ad_device_code_authentication.yml
azure_ad_external_guest_user_invited.yml		azure_ad_external_guest_user_invited.yml
azure_ad_fullaccessasapp_permission_assigned.yml		azure_ad_fullaccessasapp_permission_assigned.yml
azure_ad_global_administrator_role_assigned.yml		azure_ad_global_administrator_role_assigned.yml
azure_ad_high_number_of_failed_authentications_for_user.yml		azure_ad_high_number_of_failed_authentications_for_user.yml
azure_ad_high_number_of_failed_authentications_from_ip.yml		azure_ad_high_number_of_failed_authentications_from_ip.yml
azure_ad_multi_factor_authentication_disabled.yml		azure_ad_multi_factor_authentication_disabled.yml
View all files