valitydev/SigmaHQ
14
0
Fork 0
mirror of https://github.com/valitydev/SigmaHQ.git synced 2024-11-06 17:35:19 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Bugfix: Added time frame to correlation rule

Browse Source
This commit is contained in:
Florian Roth 2017-03-12 17:11:29 +01:00
parent 4470c2f893
commit 9fd375c130
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
rules/web/web_multiple_suspicious_resp_codes_single_source.yml
View File

@ -10,6 +10,7 @@ detection:
- 401
- 403
- 500
timeframe: 10m
condition: selection | count() by clientip > 10
falsepositives:
- Unstable application