Sentinel Repositories Content Export Pull Request by azure-sentinel-canary[bot] · Pull Request #2 · nazang/sentinel-content-as-code-bugbash

azure-sentinel-canary · 2023-02-25T02:20:13Z

Export Analytics Rule Arm Templates to Repository

….json

…ource.json.json

…on.json

…ource (ASIM Network Session schema).json.json

…tential Webshell.json.json

…json.json

….json

…oC Match.json.json

…json.json

…on.json

…y Azure AD powershell signin.json.json

…n.json

….json.json

…, test-6_30_2022.json.json

…fic.json.json

…c internet.json.json

…json

…n.json

…group.json.json

…json

….json.json

…json

…n.json

…es Authentication Normalization).json.json

…json

…son.json

…on.json

azure-sentinel-canary bot added 30 commits February 25, 2023 02:16

Exported file: Dev-0228 File Path Hashes November 2021 - ASIM.json.json

d1a92bf

Exported file: Dev-0228 File Path Hashes November 2021.json.json

57e0612

Exported file: Distributed Password cracking attempts in AzureAD.json…

94e03b3

….json

Exported file: Duplicate Rule DisplayName 1 (1).json.json

ab32160

Exported file: Duplicate Rule DisplayName 1.json.json

8baafdf

Exported file: Email access via active sync.json.json

45907cd

Exported file: Excessive Amount of Denied Connections from a Single S…

d990d37

…ource.json.json

Exported file: Excessive Denied Proxy Traffic.json.json

d1b5f8b

Exported file: Excessive Failed Authentication from Invalid Inputs.js…

0add57e

…on.json

Exported file: Excessive NXDOMAIN DNS Queries (Normalized DNS).json.json

87d2ca6

Exported file: Excessive NXDOMAIN DNS Queries.json.json

b66a8de

Exported file: Excessive Windows logon failures.json.json

c6ca33f

Exported file: Excessive number of failed connections from a single s…

f111ceb

…ource (ASIM Network Session schema).json.json

Exported file: Exchange AuditLog disabled.json.json

80b8275

Exported file: Exchange OAB Virtual Directory Attribute Containing Po…

1e24a66

…tential Webshell.json.json

Exported file: Exchange SSRF Autodiscover ProxyShell - Detection (1).…

b809036

…json.json

Exported file: Exchange SSRF Autodiscover ProxyShell - Detection.json…

577a2a5

….json

Exported file: Exchange Server Vulnerabilities Disclosed March 2021 I…

1ffe943

…oC Match.json.json

Exported file: Exchange workflow MailItemsAccessed operation anomaly.…

c5268e1

…json.json

Exported file: Explicit MFA Deny.json.json

cfd2325

Exported file: External Upstream Source Added to Azure DevOps Feed.js…

561f61c

…on.json

Exported file: External User Access Enabled.json.json

038bdf0

Exported file: External guest invitations by default guest followed b…

722fb01

…y Azure AD powershell signin.json.json

Exported file: External user added and removed in short timeframe.jso…

a59046b

…n.json

Exported file: Failed AWS Console logons but success logon to AzureAD…

6144c69

….json.json

Exported file: Failed AzureAD logons but success logon to AWS Console…

b99cdf5

…, test-6_30_2022.json.json

Exported file: Failed AzureAD logons but success logon to host.json.json

66b518f

Exported file: Failed Logins from Unknown or Invalid User.json.json

0dc97eb

Exported file: Failed host logons but success logon to AzureAD.json.json

0d2d7b1

Exported file: Failed login attempts to Azure Portal.json.json

e8240cd

azure-sentinel-canary bot added 30 commits February 25, 2023 02:19

Exported file: TI map URL entity to Syslog data.json.json

80caf91

Exported file: Threats detected by Eset.json.json

581898f

Exported file: Time series anomaly detection for total volume of traf…

856a62c

…fic.json.json

Exported file: Time series anomaly for data size transferred to publi…

9adb47c

…c internet.json.json

Exported file: Trust Monitor Event.json.json

4d25e1d

Exported file: User Accessed Suspicious URL Categories.json.json

3a76cba

Exported file: User Accounts - Sign in Failure due to CA Spikes.json.…

b27adce

…json

Exported file: User Assigned Privileged Role.json.json

25f652f

Exported file: User Login from Different Countries within 3 hours.jso…

e5a9c0b

…n.json

Exported file: User account added to built in domain local or global …

4f19d1b

…group.json.json

Exported file: User account created and deleted within 10 mins.json.json

5293ad3

Exported file: User account enabled and disabled within 10 mins.json.…

7247003

…json

Exported file: User added to Azure Active Directory Privileged Groups…

2fcbc7b

….json.json

Exported file: User agent search for log4j exploitation attempt.json.…

de79fe6

…json

Exported file: User joining Zoom meeting from suspicious timezone.jso…

35c3557

…n.json

Exported file: User login from different countries within 3 hours (Us…

3ca8ba9

…es Authentication Normalization).json.json

Exported file: Users searching for VIP user activity.json.json

58e8fcd

Exported file: Valid Analytic Rule 1.json.json

5f84fcc

Exported file: Vectra AI Detect - Detections with High Severity.json.…

b317ee7

…json

Exported file: Vectra AI Detect - New Campaign Detected.json.json

f481ed6

Exported file: Vectra AI Detect - Suspected Compromised Account.json.…

cd54b11

…json

Exported file: Vectra AI Detect - Suspected Compromised Host.json.json

a98a06f

Exported file: Vectra AI Detect - Suspicious Behaviors.json.json

2c2df6c

Exported file: Vulnerable Machines related to OMIGOD CVE-2021-38647.j…

abcca43

…son.json

Exported file: Vulnerable Machines related to log4j CVE-2021-44228.js…

2f397f0

…on.json

Exported file: Wazuh - Large Number of Web errors from an IP.json.json

e64a33e

Exported file: Web sites blocked by Eset.json.json

bf38aef

Exported file: Zoom E2E Encryption Disabled.json.json

9e569fa

Exported file: new file added -- 2_14_2013.json.json

8750573

Exported file: new test rule 1.json.json

8efe1a5

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Sentinel Repositories Content Export Pull Request#2

Sentinel Repositories Content Export Pull Request#2
azure-sentinel-canary[bot] wants to merge 375 commits intobugbash-1from
bugbash-1_SentinelExport_1677291301

azure-sentinel-canary bot commented Feb 25, 2023

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

azure-sentinel-canary bot commented Feb 25, 2023

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants