FilesExpand file tree

develop

/

macros

/

Copy path

Directory actions

More options

More options

Directory actions

More options

More options

Latest commit

 

History

History

History

 

 

develop

/

macros

/

Copy path

Top

Folders and files

Name		Name	Last commit message	Last commit date
parent directory ..
aws_cloudwatchlogs_eks.yml		aws_cloudwatchlogs_eks.yml
aws_s3_accesslogs.yml		aws_s3_accesslogs.yml
aws_securityhub_finding.yml		aws_securityhub_finding.yml
brand_abuse_dns.yml		brand_abuse_dns.yml
brand_abuse_email.yml		brand_abuse_email.yml
brand_abuse_web.yml		brand_abuse_web.yml
cisco_networks.yml		cisco_networks.yml
cloud_api_calls_from_previously_unseen_user_roles_activity_window.yml		cloud_api_calls_from_previously_unseen_user_roles_activity_window.yml
cloudtrail.yml		cloudtrail.yml
cloudwatch_eks.yml		cloudwatch_eks.yml
cloudwatch_vpc.yml		cloudwatch_vpc.yml
cloudwatchlogs_vpcflow.yml		cloudwatchlogs_vpcflow.yml
dynamic_dns_providers.yml		dynamic_dns_providers.yml
dynamic_dns_web_traffic.yml		dynamic_dns_web_traffic.yml
ec2_modification_api_calls.yml		ec2_modification_api_calls.yml
evilginx_phishlets_0365.yml		evilginx_phishlets_0365.yml
evilginx_phishlets_amazon.yml		evilginx_phishlets_amazon.yml
evilginx_phishlets_aws.yml		evilginx_phishlets_aws.yml
evilginx_phishlets_facebook.yml		evilginx_phishlets_facebook.yml
evilginx_phishlets_github.yml		evilginx_phishlets_github.yml
evilginx_phishlets_google.yml		evilginx_phishlets_google.yml
evilginx_phishlets_outlook.yml		evilginx_phishlets_outlook.yml
f5_bigip_rogue.yml		f5_bigip_rogue.yml
filter_rare_process_allow_list.yml		filter_rare_process_allow_list.yml
google_gcp_pubnet_message.yml		google_gcp_pubnet_message.yml
google_gcp_pubsub_message.yml		google_gcp_pubsub_message.yml
is_windows_system_file.yml		is_windows_system_file.yml
kubernetes_azure.yml		kubernetes_azure.yml
linux_hosts.yml		linux_hosts.yml
netbackup.yml		netbackup.yml
network_acl_events.yml		network_acl_events.yml
o365_management_activity.yml		o365_management_activity.yml
okta.yml		okta.yml
osquery_process.yml		osquery_process.yml
previously_seen_cloud_api_calls_per_user_role_forget_window.yml		previously_seen_cloud_api_calls_per_user_role_forget_window.yml
previously_seen_cloud_compute_creations_by_user_search_window_begin_offset.yml		previously_seen_cloud_compute_creations_by_user_search_window_begin_offset.yml
previously_seen_cloud_compute_image_search_window_begin_offset.yml		previously_seen_cloud_compute_image_search_window_begin_offset.yml
previously_seen_cloud_compute_images_forget_window.yml		previously_seen_cloud_compute_images_forget_window.yml
previously_seen_cloud_compute_instance_type_forget_window.yml		previously_seen_cloud_compute_instance_type_forget_window.yml
previously_seen_cloud_compute_instance_types_search_window_begin_offset.yml		previously_seen_cloud_compute_instance_types_search_window_begin_offset.yml
previously_seen_cloud_instance_modifications_by_user_search_window_begin_offset.yml		previously_seen_cloud_instance_modifications_by_user_search_window_begin_offset.yml
previously_seen_cloud_provisioning_activity_forget_window.yml		previously_seen_cloud_provisioning_activity_forget_window.yml
previously_seen_cloud_region_forget_window.yml		previously_seen_cloud_region_forget_window.yml
previously_seen_cloud_regions_search_window_begin_offset.yml		previously_seen_cloud_regions_search_window_begin_offset.yml
previously_seen_windows_services_forget_window.yml		previously_seen_windows_services_forget_window.yml
previously_seen_windows_services_window.yml		previously_seen_windows_services_window.yml
previously_seen_zoom_child_processes_forget_window.yml		previously_seen_zoom_child_processes_forget_window.yml
previously_seen_zoom_child_processes_window.yml		previously_seen_zoom_child_processes_window.yml
previously_unseen_cloud_provisioning_activity_window.yml		previously_unseen_cloud_provisioning_activity_window.yml
prohibited_apps_launching_cmd.yml		prohibited_apps_launching_cmd.yml
prohibited_softwares.yml		prohibited_softwares.yml
ransomware_extensions.yml		ransomware_extensions.yml
ransomware_notes.yml		ransomware_notes.yml
remove_valid_domains.yml		remove_valid_domains.yml
s3_accesslogs.yml		s3_accesslogs.yml
security_content_ctime.yml		security_content_ctime.yml
security_content_summariesonly.yml		security_content_summariesonly.yml
security_group_api_calls.yml		security_group_api_calls.yml
stream_dns.yml		stream_dns.yml
stream_http.yml		stream_http.yml
stream_tcp.yml		stream_tcp.yml
suspicious_email_attachments.yml		suspicious_email_attachments.yml
suspicious_writes.yml		suspicious_writes.yml
sysmon.yml		sysmon.yml
system_network_configuration_discovery_tools.yml		system_network_configuration_discovery_tools.yml
uncommon_processes.yml		uncommon_processes.yml
wineventlog_security.yml		wineventlog_security.yml
wineventlog_system.yml		wineventlog_system.yml
wmi.yml		wmi.yml
zeek_rpc.yml		zeek_rpc.yml
zeek_ssl.yml		zeek_ssl.yml
View all files