Comments (5)
We would appreciate it if you could provide us with more info about this issue/pr!
from security_content.
from security_content.
@kkolli4 :Hey Durga, ESCU - AWS Cloud Provisioning From Previously Unseen City - Rule
- this particular search name is not in the list of Beta searches listed here: https://docs.google.com/spreadsheets/d/1K8xMy3jX_PeF__QU-0sP-r7n2HwMMUQpnYfvHF_rEi4/edit#gid=1166574115
I think you want to look for and test ESCU - Cloud Provisioning From Previously Unseen City - Rule
.
Note: the updated search name for Mustang does not have AWS
in the search title
from security_content.
also, Thank you @kkolli4 for pointing out naming inconsistency: I have updated the sheet with correct titles
from security_content.
The previous search AWS Cloud Provisioning From Previously Unseen City
still shows an error but we intend to deprecate it since customers should use the latest Change Datamodel(yet to be released)
from security_content.
Related Issues (20)
- [BUG] Linux Service Started Or Enabled triggering on Windows events HOT 2
- [BUG] Build is not working HOT 6
- Consider adding Scope for search Azure AD Tenant Wide Admin Consent Granted HOT 1
- [BUG] DNS Query Length With High Standard Deviation HOT 1
- [BUG] Datasource is set incorrectly on this detection
- [BUG] ESCU - Get ADUser with PowerShell - Rule has no Adaptive Reponse Actions HOT 3
- Scheduled Task Initiation on Remote Endpoint - Update Analytics HOT 2
- Azure AD Multi-Source Failed Authentications Spike - Missing ADFSSignInLogs category
- Minor malicious_powershell_process___encoded_command search update HOT 1
- [BUG] Detections with joins failed to properly translate to Sigma HOT 1
- [BUG] Missing Wildcards in Splunk Rule for Detecting Known Services Killed by Ransomware
- [BUG] Incorrect logic statement in detection search "Detect Renamed PSExec" HOT 1
- [BUG] please, fix links in wiki: https://github.com/splunk/security_content/wiki/Detection-Analytic-Types HOT 1
- [BUG] browser_app_list lookup doesn't exist in indexers, causing query to fail in "Windows Credential Access From Browser Password Store" HOT 1
- [BUG] `Message` vs. `ScriptBlockText` for Powershell rules HOT 1
- Custom Content Development HOT 1
- AppLocker Dashboard Issue - No Policy Review Data
- [BUG] - Windows AD Domain Replication ACL Addition has unnecessary escape chars in SPL causing errors HOT 1
- [BUG] Broken token in `tags.message` (Risk Message) for 11 rules HOT 2
- [BUG] current detections.json has searches with unbalanced parentheses HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from security_content.