dosegal 4f2ef115c4 Add KQL validations for ImAuthentication (#4187) ... * added KQL validations for ImAuthentication * updated KQL validations * fix Acc2Host_HostWithMostFails		2022-02-17 13:27:36 +02:00
..
Acc2Host_HostWithMostFails.yaml	Add KQL validations for ImAuthentication (#4187)	2022-02-17 13:27:36 +02:00
Acc2IP_rareIPLocation.yaml	Casting and other bug fixes	2021-04-25 21:39:33 +03:00
AlertsForUser.txt	Rearranged the folders to be all by inputEntity type (#450)	2020-01-29 13:17:58 +02:00
HostsAppConTriggered.yaml	Casting and other bug fixes	2021-04-25 21:39:33 +03:00
LeastPrevProcess_ByAccount.yaml	Casting ProcessID to string to match AlertV3	2020-09-24 10:48:17 +03:00
Messages_ByAccount.txt	Rearranged the folders to be all by inputEntity type (#450)	2020-01-29 13:17:58 +02:00
Messages_ByDomain.txt	Rearranged the folders to be all by inputEntity type (#450)	2020-01-29 13:17:58 +02:00
ServiceCreatedByAccount.yaml	Revert "Insights folder rename"	2020-09-14 11:48:15 -07:00
UserAccount_FailedLogons.yaml	Casting and other bug fixes	2021-04-25 21:39:33 +03:00
UserAccount_LogonsFromIPAddress.yaml	Adding parameters to Authentication +2 expansion queries	2021-10-21 10:05:20 +03:00
UserAccount_NewInteractiveLogon.yaml	Casting aadUserId to guid to prevent malformed strings from passing	2020-10-14 10:11:37 +03:00
UserAccount_NewRemoteInteractiveLogon.yaml	Casting aadUserId to guid to prevent malformed strings from passing	2020-10-14 10:11:37 +03:00
UserAccount_NewResourceAccess.yaml	Fix | Exploration Queries Enhancements	2020-08-20 14:44:58 +03:00
UserAccount_Peers.yaml	fix - replace parsejson with parse_json	2021-08-17 12:17:02 -07:00
UserAccount_ResourceLogon.yaml	Revert "Insights folder rename"	2020-09-14 11:48:15 -07:00
UserAccount_ScreenshotHosts.yaml	yaml fixes	2021-04-22 12:04:22 +03:00
UserAccount_SuccessLogons.yaml	Fixing test failures	2021-04-26 20:05:31 +03:00
office_activity.txt	Rearranged the folders to be all by inputEntity type (#450)	2020-01-29 13:17:58 +02:00
user_logons.txt	Rearranged the folders to be all by inputEntity type (#450)	2020-01-29 13:17:58 +02:00