Arjun Trivedi
|
d08bb314dc
|
Update PaloAlto-HighRiskPorts.yaml
removed the regex and filtering using "ipv4_is_private" operator
|
2022-01-19 12:09:40 +05:30 |
|
4R9UN
|
e46afa1db9
|
Update PaloAlto-HighRiskPorts.yaml
Reduce noise through drop Private IP commination
|
2022-01-13 17:17:09 +05:30 |
Ofer Shezaf
|
ee97399b42
|
Revert "Revert "Merge branch 'master' of https://github.com/Azure/Azure-Sentinel""
This reverts commit ff69f85224.
|
2022-01-03 16:21:46 +02:00 |
|
Ofer Shezaf
|
ff69f85224
|
Revert "Merge branch 'master' of https://github.com/Azure/Azure-Sentinel"
This reverts commit c929df845a, reversing
changes made to 53e6c92e3e.
|
2022-01-03 16:04:13 +02:00 |
Pete Bryan
|
f8bc53dd9e
|
Added missing KQL statement
|
2021-12-17 09:46:36 -08:00 |
|
Pete Bryan
|
cb43266943
|
Fixed template issue
|
2021-12-17 09:01:14 -08:00 |
|
Pete Bryan
|
291b05ae79
|
New hunting query looking for external LDAP connections
|
2021-12-17 08:50:33 -08:00 |
Shain Wray (MSTIC)
|
54b4792b1c
|
Updating queries with common timestamp param to support future features.
|
2021-09-10 10:10:13 -07:00 |
Matthieu Maitre
|
a6ac7c65a6
|
Swap join legs to improve perf
|
2021-05-06 10:46:33 -07:00 |
|
Matthieu Maitre
|
6476e8dff4
|
Add Palo Alto High Risk Port hunting query
|
2021-04-21 08:46:16 -07:00 |