Code

New Detection for Multi Cloud#8808

Code

Merged

petebryan merged 48 commits intomasterAzure/Azure-Sentinel:masterfrom Multi_Cloud_DetectionAzure/Azure-Sentinel:Multi_Cloud_DetectionCopy head branch name to clipboardSep 14, 2023

+900

Commits

Commits on Aug 18, 2023

• New Detection for Multi Cloud

  Show description for 275ebcf
  4R9UN

  authored
  275ebcf

• Update ExtensiveAWSComputeResurseDeployements.yaml

  4R9UN

  authored
  7f71510

Commits on Aug 21, 2023

• Update ExtensiveAWSComputeResurseDeployements.yaml

  Show description for d1e87ef
  4R9UN

  authored
  d1e87ef

Commits on Aug 22, 2023

• Update SucessfullPosswordSprayAttampOnAWSConsolelogin.yaml

  Show description for 2f240e0
  4R9UN

  authored
  2f240e0

Commits on Aug 24, 2023

• User impersonation Detection Added

  4R9UN

  authored
  bcb89f1

• Update UserImpersonateByAAID.yaml

  4R9UN

  authored
  13c6928

• Update UserImpersonateByRiskyUser.yaml

  4R9UN

  authored
  ff29e58

Commits on Aug 31, 2023

• Update BrutforceAttemptOnAzurePortalAndAWSConsolAtSameTime.yaml

  Show description for 8a3982c
  4R9UN

  authored
  8a3982c

• Update BrutforceAttemptOnAzurePortalAndAWSConsolAtSameTime.yaml

  Show description for db323ed
  4R9UN

  authored
  db323ed

• Update and rename ExtensiveAWSComputeResurseDeployements.yaml to SuspiciousAWSEC2ComputeResourceDeployments

  Show description for 4db19e8
  4R9UN

  authored
  4db19e8

• Update and rename SucessfullPosswordSprayAttampOnAWSConsolelogin.yaml to SuccessfulAWSConsoleLoginfromIPAddressObservedConductingPasswordSpray.yaml

  Show description for 00e813d
  4R9UN

  authored
  00e813d

• Update SuspiciousAWSCLICommandExecution.yaml

  Show description for cf036c6
  4R9UN

  authored
  cf036c6

• Update SuspiciousAWSConsolLoginByCredentialAceessAlerts.yaml

  Show description for 4ebb640
  4R9UN

  authored
  4ebb640

• Update UserImpersonateByAAID.yaml

  Show description for ad82a6b
  4R9UN

  authored
  ad82a6b

Commits on Sep 1, 2023

• Update UserImpersonateByRiskyUser.yaml

  Show description for e7ece74
  4R9UN

  authored
  e7ece74

Commits on Sep 4, 2023

• Update BrutforceAttemptOnAzurePortalAndAWSConsolAtSameTime.yaml

  4R9UN

  authored
  0f678f6

• Update UserImpersonateByRiskyUser.yaml

  4R9UN

  authored
  c54fe88

• Update BrutforceAttemptOnAzurePortalAndAWSConsolAtSameTime.yaml

  4R9UN

  authored
  ea72aae

• Update SuccessfulAWSConsoleLoginfromIPAddressObservedConductingPasswordSpray.yaml

  4R9UN

  authored
  6fa561c

• Update SuspiciousAWSCLICommandExecution.yaml

  4R9UN

  authored
  5c9b27a

• Update SuspiciousAWSConsolLoginByCredentialAceessAlerts.yaml

  4R9UN

  authored
  9b41d90

• Update SuspiciousAWSEC2ComputeResourceDeployments

  4R9UN

  authored
  318ec41

• Update UserImpersonateByAAID.yaml

  4R9UN

  authored
  465b3a2

• Update UserImpersonateByRiskyUser.yaml

  4R9UN

  authored
  d680faf

• Update and rename SuspiciousAWSEC2ComputeResourceDeployments to SuspiciousAWSEC2ComputeResourceDeployments.yaml

  4R9UN

  authored
  9f24660

• Update SuspiciousAWSEC2ComputeResourceDeployments.yaml

  4R9UN

  authored
  641e47a

Commits on Sep 7, 2023

• 2 Detection AWSGuardDuty to Azure Login

  Show description for 00945ad
  4R9UN

  authored
  00945ad

• Update Unauthorized_user_access_across_AWS_and_Azure.yaml

  Show description for 324dd2b
  4R9UN

  authored
  324dd2b

• Update CrossCloudUnauthorizedCredentialsAccessDetection.yaml

  Show description for 8b3594e
  4R9UN

  authored
  8b3594e

• Update Unauthorized_user_access_across_AWS_and_Azure.yaml

  4R9UN

  authored
  9394bf4

• Update CrossCloudUnauthorizedCredentialsAccessDetection.yaml

  4R9UN

  authored
  78b0e53

• Update CrossCloudUnauthorizedCredentialsAccessDetection.yaml

  4R9UN

  authored
  5b0989a

• Update Unauthorized_user_access_across_AWS_and_Azure.yaml

  4R9UN

  authored
  56fd940

• Update CrossCloudUnauthorizedCredentialsAccessDetection.yaml

  4R9UN

  authored
  c315ebc

• Update Unauthorized_user_access_across_AWS_and_Azure.yaml

  4R9UN

  authored
  3d97890

• Update CrossCloudUnauthorizedCredentialsAccessDetection.yaml

  4R9UN

  authored
  8b4e03f

• Update Unauthorized_user_access_across_AWS_and_Azure.yaml

  4R9UN

  authored
  4790116

• Update Unauthorized_user_access_across_AWS_and_Azure.yaml

  4R9UN

  authored
  48a864c

Commits on Sep 8, 2023

• Update BrutforceAttemptOnAzurePortalAndAWSConsolAtSameTime.yaml

  Show description for c6b282a
  4R9UN

  authored
  c6b282a

• Update CrossCloudUnauthorizedCredentialsAccessDetection.yaml

  Show description for 22d49fb
  4R9UN

  authored
  22d49fb

• Update Unauthorized_user_access_across_AWS_and_Azure.yaml

  4R9UN

  authored
  502f23c

• Added New Detection for AWS cloud Shell execution

  Show description for ffc5ff1
  4R9UN

  authored
  ffc5ff1

• Delete Detections/MultipleDataSources/SuspiciousAWSEC2ComputeResourceDeployments.yaml

  Show description for db70dd7
  4R9UN

  authored
  db70dd7

• Delete Detections/MultipleDataSources/SuspiciousAWSCLICommandExecution.yaml

  Show description for 69556e5
  4R9UN

  authored
  69556e5

Commits on Sep 14, 2023

• Update UserImpersonateByAAID.yaml

  Show description for 7d0a9cf
  4R9UN

  authored
  7d0a9cf

• Update UserImpersonateByRiskyUser.yaml

  4R9UN

  authored
  36aea9f

• Update CrossCloudUnauthorizedCredentialsAccessDetection.yaml

  Show description for becec26
  4R9UN

  authored
  becec26

• Update Unauthorized_user_access_across_AWS_and_Azure.yaml

  4R9UN

  authored
  7612f73