47 Commits

Author	SHA1	Message	Date
toffeebr33k	c8c4183678	Update aws_enum_listing.yml	2020-11-22 01:53:58 +08:00
toffeebr33k	3d0e1988c6	Update aws_enum_listing.yml	2020-11-22 01:41:20 +08:00
toffeebr33k	273590b151	Update aws_enum_listing.yml	2020-11-22 01:17:42 +08:00
toffeebr33k	52fca0fe3a	Update aws_enum_listing.yml	2020-11-22 01:05:56 +08:00
toffeebr33k	e764ca687a	Update aws_enum_listing.yml	2020-11-22 00:50:34 +08:00
toffeebr33k	00504ee186	Update aws_update_login_profile.yml	2020-11-22 00:42:25 +08:00
toffeebr33k	3dd1525b98	Update aws_update_login_profile.yml	2020-11-22 00:38:41 +08:00
toffeebr33k	6b65180464	Add files via upload	2020-11-22 00:33:47 +08:00
toffeebr33k	cff82ff79a	Delete aws_update_login_profile.yml	2020-11-22 00:33:17 +08:00
toffeebr33k	7e1c918b4d	Delete aws_enum_listing.yml	2020-11-22 00:32:59 +08:00
toffeebr33k	551764b630	Add files via upload	2020-11-22 00:26:17 +08:00
toffeebr33k	3dd25ddea4	Delete aws_update_login_profile.yml	2020-11-22 00:25:54 +08:00
toffeebr33k	fba9c12bb2	Delete aws_enum_listing.yml	2020-11-22 00:25:29 +08:00
toffeebr33k	6c1f3f5969	Update aws_update_login_profile.yml	2020-11-21 23:45:10 +08:00
toffeebr33k	70e725e82e	Update aws_enum_listing.yml	2020-11-21 23:44:14 +08:00
toffeebr33k	596d1b6e4c	Update aws_update_login_profile.yml	2020-11-21 23:29:49 +08:00
toffeebr33k	a786ebd04b	Update aws_enum_listing.yml	2020-11-21 23:28:57 +08:00
toffeebr33k	1ca903b168	Update aws_enum_listing.yml	2020-11-21 23:22:07 +08:00
toffeebr33k	7f61591865	Add files via upload	2020-11-21 23:12:50 +08:00
Mike Wade	57cae0ded1	Fixed reference typo	2020-09-13 22:07:43 -06:00
Mike Wade	52ab677798	Fixed my git issue	2020-09-13 22:03:04 -06:00
aw350m3	198e42d724	deleted extra spaces	2020-09-03 14:22:31 +00:00
aw350m3	b00047a4e8	att&ck tags review: application, apt, cloud, generic, proxy	2020-09-03 14:16:54 +00:00
Aidan Bracher	b61527d0b2	Added ATT&CK tactic	2020-07-18 02:42:10 +01:00
Aidan Bracher	161829a4c0	Added ATT&CK tactic	2020-07-18 02:41:48 +01:00
Aidan Bracher	147fd46157	Added ATT&CK tactic	2020-07-18 02:41:10 +01:00
Ivan Kirillov	0fbfcc6ba9	Initial round of subtechnique updates	2020-06-16 14:46:08 -06:00
pdr9rc	31ad81874f	capitalized titles ... corrected capitalization of titles and removed literals from config	2020-05-05 11:32:18 +01:00
Tiago Faria	dd85467a27	Update aws_ec2_vm_export_failure.yml	2020-05-02 00:13:55 +01:00
pdr9rc	9ce84a38e5	overrides section support + one example rule + cloudtrail config ... ditto	2020-04-29 20:36:45 +01:00
faloker	6d9c8e44d7	Update rules titles	2020-02-12 23:09:16 +02:00
faloker	1b15dba712	Correct the indentation	2020-02-12 22:48:46 +02:00
faloker	f387cf0c37	Add the rule to detect changes to startup scripts	2020-02-12 22:23:18 +02:00
faloker	01d2f9f99d	Add the rule to detect backdooring of users keys	2020-02-12 22:22:38 +02:00
faloker	b26c5d8c51	Add rules to detect AWS RDS exfiltration	2020-02-12 22:21:52 +02:00
faloker	ddf5f8ec23	Update conditions	2020-02-12 22:20:15 +02:00
faloker	aacab37f84	Add a rule for guardduty trusted IPs manipulation	2020-02-11 23:28:23 +02:00
faloker	b6c834195e	Add a rule for ec2 userdata exfil	2020-02-11 23:25:54 +02:00
Florian Roth	05d7448a9a	Minor Changes	2020-01-29 20:25:46 +01:00
Florian Roth	d1357ddc50	Minor changes	2020-01-29 20:25:14 +01:00
Florian Roth	8a4f9ad7f8	Minor changes	2020-01-29 20:24:31 +01:00
Florian Roth	a6d7af270d	Added date	2020-01-29 20:23:40 +01:00
Florian Roth	56e1e6b13d	Lower case service name	2020-01-29 20:23:12 +01:00
Florian Roth	f1ce6ba6ad	Lowering level ... Lowering level to medium for events that can have a legitimate cause	2020-01-29 20:22:34 +01:00
vitaliy0x1	5aa75a90fd	added aws_root_account_usage.yml	2020-01-21 15:07:32 +02:00
vitaliy0x1	0d6642abd6	added aws_config_disable_recording.yml	2020-01-21 15:07:10 +02:00
vitaliy0x1	17c00d8a11	added aws_cloudtrail_disable_logging.yml	2020-01-21 15:06:44 +02:00