Rename PulseConnectSecureVPN-PasswordSpray.yaml to PulseConnectSecureVPN-DistinctFailedUserLogin.yaml

Made File name change based on change in name and description of this detection query. Details Below:

Changed the below :
name: PulseConnectSecure - Potential Password Spray Attempts
description: |
  'This query identifies evidence of potential password spray activity against the Pulse Secure VPN server, 
   by looking for failures from multiple accounts, originating from the same host within a time window'


To 

name: PulseConnectSecure - Large Number of Distinct Failed User Logins
description: |
  'This query identifies evidence of failed login attempts from a large number of distinct users on a Pulse Connect Secure VPN server'

This commit is contained in:

aprakash13

2020-09-17 11:42:21 -07:00

коммит произвёл

GitHub

Родитель 62d305b6cd

Коммит 508e010633

Не найден ключ, соответствующий данной подписи

Идентификатор ключа GPG: 4AEE18F83AFDEB23

1 изменённых файлов: 0 добавлений и 0 удалений

0

Detections/PulseConnectSecure/PulseConnectSecureVPN-PasswordSpray.yaml → Detections/PulseConnectSecure/PulseConnectSecureVPN-DistinctFailedUserLogin.yaml

Просмотреть файл

Rename PulseConnectSecureVPN-PasswordSpray.yaml to PulseConnectSecureVPN-DistinctFailedUserLogin.yaml

0 Detections/PulseConnectSecure/PulseConnectSecureVPN-PasswordSpray.yaml → Detections/PulseConnectSecure/PulseConnectSecureVPN-DistinctFailedUserLogin.yaml Убрать экранирование Экранировать Просмотреть файл

0

Detections/PulseConnectSecure/PulseConnectSecureVPN-PasswordSpray.yaml → Detections/PulseConnectSecure/PulseConnectSecureVPN-DistinctFailedUserLogin.yaml

Просмотреть файл