34 Commits

Author	SHA1	Message	Date
Austin Songer	62f2affd03	Spelling fix	2021-08-24 14:15:50 +00:00
Austin Songer	c0e58d3c27	Update	2021-08-23 23:00:58 +00:00
Austin Songer	29e1ce7e8f	Update	2021-08-23 22:50:39 +00:00
Austin Songer	ad892eb239	Update	2021-08-23 22:46:37 +00:00
Austin Songer	84944cf849	Update	2021-08-23 22:30:11 +00:00
Austin Songer	53482b7e9c	Update	2021-08-23 22:19:41 +00:00
Austin Songer	754158bfd2	Update	2021-08-23 22:18:12 +00:00
Austin Songer	da69b2f531	Update	2021-08-23 22:09:27 +00:00
Austin Songer	595bd3b80f	Updated	2021-08-23 22:07:09 +00:00
Austin Songer	1fa32fcd1a	Update	2021-08-23 22:02:47 +00:00
Austin Songer	4ab9519546	Update	2021-08-23 18:59:07 +00:00
Austin Songer	8e4b8f45dd	Update	2021-08-23 18:57:17 +00:00
Austin Songer	a5c551ad61	Merge branch '365' of https://github.com/austinsonger/sigma into 365	2021-08-23 18:55:40 +00:00
Austin Songer	41786a1b63	In-Progress	2021-08-23 18:55:29 +00:00
Austin Songer	3d151ef9f1	Update microsoft365_logon_from_risky_ip_address.yml	2021-08-23 12:59:53 -05:00
Austin Songer	23e96712f8	Update microsoft365_data_exfiltration_to_unsanctioned_app.yml	2021-08-23 12:59:44 -05:00
Austin Songer	1834324a16	Update	2021-08-23 17:33:57 +00:00
Austin Songer	7d211f2487	Data exfiltration to unsanctioned apps	2021-08-23 17:33:00 +00:00
Austin Songer	ae84559488	M365 - Risky IP Addresses	2021-08-23 17:18:16 +00:00
frack113	dbbb422a42	Merge pull request #1885 from austinsonger/microsoft365_unusual_volume_of_file_deletion.yml ... microsoft365_unusual_volume_of_file_deletion.yml	2021-08-20 17:20:43 +02:00
frack113	34ac3587e9	Merge pull request #1884 from austinsonger/microsoft365_potential_ransomware_activity.yml ... microsoft365_potential_ransomware_activity.yml	2021-08-20 17:20:34 +02:00
frack113	73fee68d4b	Merge pull request #1883 from austinsonger/microsoft365_user_restricted_from_sending_email.yml ... microsoft365_user_restricted_from_sending_email.yml	2021-08-20 17:20:22 +02:00
Austin Songer	a25f6e196f	Update microsoft365_unusual_volume_of_file_deletion.yml	2021-08-20 08:17:25 -05:00
Austin Songer	360b936357	Update microsoft365_potential_ransomware_activity.yml	2021-08-20 08:17:09 -05:00
Austin Songer	ae36804935	Update microsoft365_user_restricted_from_sending_email.yml	2021-08-20 08:16:48 -05:00
frack113	4e29dc9c45	fix title	2021-08-20 09:06:16 +02:00
Austin Songer	853c2eb41d	Update microsoft365_potential_ransomware_activity.yml	2021-08-20 01:19:01 -05:00
Austin Songer	f745593e80	Update microsoft365_potential_ransomware_activity.yml	2021-08-20 00:33:42 -05:00
Austin Songer	54bda90685	Create microsoft365_user_restricted_from_sending_email.yml	2021-08-19 23:08:25 -05:00
Austin Songer	9b19190ea7	Create microsoft365_potential_ransomware_activity.yml	2021-08-19 23:05:05 -05:00
Austin Songer	99fbd4ef44	Create microsoft365_unusual_volume_of_file_deletion.yml	2021-08-19 23:00:23 -05:00
Austin Songer	0a3e57cc12	Update	2021-08-20 02:10:32 +00:00
Austin Songer	842ade16be	Forgot to add my username to some of the rules.	2021-08-20 02:09:31 +00:00
frack113	50f02ed957	move microsoft365 rules	2021-08-13 15:45:28 +02:00