atc-project / atomic-threat-coverage Goto Github PK
View Code? Open in Web Editor NEWActionable analytics designed to combat threats
License: Apache License 2.0
Actionable analytics designed to combat threats
License: Apache License 2.0
Develop Data Needed DN_0068_4728_member_was_added_to_security_enabled_global_group (Event ID 4728) using this template and related Logging Polic (if there is any) using this template.
Framework for normalizing logs.
https://github.com/Cyb3rWard0g/OSSEM
Develop Data Needed DN_0046_1031_dhcp_service_callout_dll_file_has_caused_an_exception (Event ID 1031) using this template and related Logging Polic (if there is any) using this template.
Develop Data Needed DN_0055_4103_powershell_module_logging (Event ID 4103) using this template and related Logging Polic (if there is any) using this template.
Develop Data Needed DN_0034_104_application_log_file_was_cleared (Event ID 104) using this template and related Logging Polic (if there is any) using this template.
Develop Data Needed DN_0067_4719_system_audit_policy_was_changed (Event ID 4719) using this template and related Logging Polic (if there is any) using this template.
Develop Data Needed DN_0040_528_user_successfully_logged_on_to_a_computer (Event ID 528) using this template and related Logging Polic (if there is any) using this template.
Develop Data Needed DN_0038_517_the_audit_log_was_cleared (Event ID 517) using this template and related Logging Polic (if there is any) using this template.
Develop Data Needed DN_0045_1001_windows_error_reporting (Event ID 1001) using this template and related Logging Polic (if there is any) using this template.
Develop Data Needed DN_0080_5859_wmi_activity (Event ID 5859) using this template and related Logging Polic (if there is any) using this template.
Develop Data Needed DN_0069_4732_member_was_added_to_security_enabled_local_group (Event ID 4732) using this template and related Logging Polic (if there is any) using this template.
Develop Data Needed DN_0061_4660_object_was_deleted (Event ID 4660) using this template and related Logging Polic (if there is any) using this template.
Develop Data Needed DN_0050_1102_audit_log_was_cleared (Event ID 1102) using this template and related Logging Polic (if there is any) using this template.
Develop Data Needed DN_0073_4756_member_was_added_to_a_security_enabled_universal_group (Event ID 4756) using this template and related Logging Polic (if there is any) using this template.
Develop Data Needed DN_0053_2100_pnp_or_power_operation_for_usb_device (Event ID 2100) using this template and related Logging Polic (if there is any) using this template.
Develop Data Needed DN_0048_1033_dhcp_service_successfully_loaded_callout_dlls (Event ID 1033) using this template and related Logging Polic (if there is any) using this template.
Develop Data Needed DN_0071_4737_security_enabled_global_group_was_changed (Event ID 4737) using this template and related Logging Polic (if there is any) using this template.
Develop Data Needed DN_0047_1032_dhcp_service_callout_dll_file_has_caused_an_exception (Event ID 1032) using this template and related Logging Polic (if there is any) using this template.
Develop Data Needed DN_0075_4766_attempt_to_add_sid_history_to_an_account_failed (Event ID 4766) using this template and related Logging Polic (if there is any) using this template.
Develop Data Needed DN_0058_4656_handle_to_an_object_was_requested (Event ID 4656) using this template and related Logging Polic (if there is any) using this template.
Develop Data Needed DN_0076_4768_kerberos_authentication_ticket_was_requested (Event ID 4768) using this template and related Logging Polic (if there is any) using this template.
Develop Data Needed DN_0051_1121_attack_surface_reduction_blocking_mode_event (Event ID 1121) using this template and related Logging Polic (if there is any) using this template.
Develop Data Needed DN_0035_106_task_scheduler_task_registered (Event ID 106) using this template and related Logging Polic (if there is any) using this template.
Develop Data Needed DN_0064_4698_scheduled_task_was_created (Event ID 4698) using this template and related Logging Polic (if there is any) using this template.
Develop Data Needed DN_0039_524_system_catalog_has_been_deleted (Event ID 524) using this template and related Logging Polic (if there is any) using this template.
Develop Data Needed DN_0057_4625_account_failed_to_log_on (Event ID 4625) using this template and related Logging Polic (if there is any) using this template.
Develop Data Needed DN_0043_770_dns_server_plugin_dll_has_been_loaded (Event ID 770) using this template and related Logging Polic (if there is any) using this template.
Develop Data Needed DN_0052_2003_query_to_load_usb_drivers (Event ID 2003) using this template and related Logging Polic (if there is any) using this template.
Develop Data Needed DN_0042_675_kerberos_preauthentication_failed (Event ID 675) using this template and related Logging Polic (if there is any) using this template.
Develop Data Needed DN_0044_1000_application_crashed (Event ID 1000) using this template and related Logging Polic (if there is any) using this template.
Develop Data Needed DN_0077_4769_kerberos_service_ticket_was_requested (Event ID 4769) using this template and related Logging Polic (if there is any) using this template.
Develop Data Needed DN_0081_5861_wmi_activity (Event ID 5861) using this template and related Logging Polic (if there is any) using this template.
Develop Data Needed DN_0072_4755_security_enabled_universal_group_was_changed (Event ID 4755) using this template and related Logging Polic (if there is any) using this template.
Develop Data Needed DN_0078_4771_kerberos_pre_authentication_failed (Event ID 4771) using this template and related Logging Polic (if there is any) using this template.
Develop Data Needed DN_0059_4657_registry_value_was_modified (Event ID 4657) using this template and related Logging Polic (if there is any) using this template.
Develop Data Needed DN_0065_4701_scheduled_task_was_disabled (Event ID 4701) using this template and related Logging Polic (if there is any) using this template.
Develop Data Needed DN_0063_4697_service_was_installed_in_the_system (Event ID 4697) using this template and related Logging Polic (if there is any) using this template.
Develop Data Needed DN_0037_400_engine_state_is_changed_from_none_to_available (Event ID 400) using this template and related Logging Polic (if there is any) using this template.
Develop Data Needed DN_0062_4663_attempt_was_made_to_access_an_object (Event ID 4663) using this template and related Logging Polic (if there is any) using this template.
Develop Data Needed DN_0056_4104_powershell_script_block_logging (Event ID 4104) using this template and related Logging Polic (if there is any) using this template.
Develop Data Needed DN_0041_529_logon_failure (Event ID 529) using this template and related Logging Polic (if there is any) using this template.
Develop Data Needed DN_0070_4735_security_enabled_local_group_was_changed (Event ID 4735) using this template and related Logging Polic (if there is any) using this template.
Develop Data Needed DN_0036_150_dns_server_could_not_load_dll (Event ID 150) using this template and related Logging Polic (if there is any) using this template.
Develop Data Needed DN_0079_4776_computer_attempted_to_validate_the_credentials_for_an_account (Event ID 4776) using this template and related Logging Polic (if there is any) using this template.
Develop Data Needed DN_0082_8002_ntlm_server_blocked_audit (Event ID 8002) using this template and related Logging Polic (if there is any) using this template.
Develop Data Needed DN_0066_4704_user_right_was_assigned (Event ID 4704) using this template and related Logging Polic (if there is any) using this template.
Develop Data Needed DN_0074_4765_sid_history_was_added_to_an_account (Event ID 4765) using this template and related Logging Polic (if there is any) using this template.
Develop Data Needed DN_0060_4658_handle_to_an_object_was_closed (Event ID 4658) using this template and related Logging Polic (if there is any) using this template.
Develop Data Needed DN_0049_1034_dhcp_service_failed_to_load_callout_dlls (Event ID 1034) using this template and related Logging Polic (if there is any) using this template.
Develop Data Needed DN_0054_2102_pnp_or_power_operation_for_usb_device (Event ID 2102) using this template and related Logging Polic (if there is any) using this template.
A declarative, efficient, and flexible JavaScript library for building user interfaces.
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. ๐๐๐
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google โค๏ธ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.