sarvex/Azure-Sentinel

main

Azure-Sentinel

Grade	Name	Churn	Issues
A	Detections\ASimWebSession\UnusualUAHackTool.yaml	7	-
A	Hunting Queries\AzureActivity\Granting_Permissions_to_Account.yaml	7	-
A	Detections\AWSCloudTrail\AWS_ChangeToVPC.yaml	7	-
A	Detections\ASimWebSession\UnusualUACryptoMiners.yaml	7	-
A	Detections\SigninLogs\AnomalousUserAppSigninLocationIncrease-detection.yaml	7	-
A	Detections\ASimWebSession\PossibleDGAContacts.yaml	7	-
A	Hunting Queries\DnsEvents\Solorigate-DNS-Pattern.yaml	7	-
A	Hunting Queries\AzureActivity\Creating_Anomalous_Number_Of_Resources.yaml	7	-
A	Detections\ASimNetworkSession\PossibleBeaconingActivity.yaml	7	-
A	Detections\OfficeActivity\SharePoint_Downloads_byNewUserAgent.yaml	7	-
A	Exploration Queries\InputEntity_IP\MostPrevLxHosts_ByIP.yaml	7	-
A	Detections\ASimDNS\imDns_IPEntity_DnsEvents.yaml	7	-
A	Detections\MultipleDataSources\EmailAccessviaActiveSync.yaml	7	-
A	Exploration Queries\InputEntity_IP\LeastPrevIn_ByIPAddress.yaml	7	-
A	Detections\OfficeActivity\Malicious_Inbox_Rule.yaml	7	-
A	Hunting Queries\SigninLogs\Signins-From-VPS-Providers.yaml	7	-
A	Exploration Queries\InputEntity_IP\LeastPrevOut_ByIPAddress.yaml	7	-
A	Exploration Queries\InputEntity_IP\IP2IP_IPsWithMostDROPs.yaml	7	-
A	Detections\OfficeActivity\MultipleTeamsDeletes.yaml	7	-
A	Exploration Queries\InputEntity_File\HostwithFile.yaml	6	-