sarvex/Azure-Sentinel

main

Azure-Sentinel

Grade	Name	Churn	Issues
A	Parsers\ASimAuthentication\ProductParsers\ASimAuthenticationAWSCloudTrail.yaml	5	-
A	Detections\QualysVM\NewHighSeverityVulnDetectedAcrossMulitpleHosts.yaml	5	-
A	Hunting Queries\W3CIISLog\RareClientFileAccess.yaml	5	-
A	Hunting Queries\W3CIISLog\SuspectedMailBoxExportHostonOWA.yaml	5	-
A	Detections\ProofpointPOD\ProofpointPODEmailSenderInTIList.yaml	5	-
A	Hunting Queries\ThreatIntelligenceIndicator\FileEntity_VMConnection.yaml	5	-
A	Hunting Queries\ZoomLogs\HighCPURoom.yaml	5	-
A	Hunting Queries\ThreatIntelligenceIndicator\FileEntity_WireData.yaml	5	-
A	Detections\ProofpointPOD\ProofpointPODEmailSenderIPinTIList.yaml	5	-
A	Hunting Queries\ZoomLogs\NewTZ.yaml	5	-
A	Detections\ProofpointPOD\ProofpointPODMultipleProtectedEmailsToUnknownRecipient.yaml	5	-
A	DataConnectors\AWS-S3\ConfigAwsConnector.ps1	5	1
A	Parsers\ASimAuthentication\ProductParsers\ASimAuthenticationAADManagedIdentity.yaml	5	-
A	Hunting Queries\ThreatIntelligenceIndicator\FileEntity_Syslog.yaml	5	-
A	Detections\ASimAuthentication\imSigninAttemptsByIPviaDisabledAccounts.yaml	5	-
A	Exploration Queries\InputEntity_IP\LeastPrevClientIP-DNSNameQueryToIP.yaml	5	-
A	Detections\OfficeActivity\Office_Uploaded_Executables.yaml	5	-
A	DataConnectors\AWS-S3\ConfigVpcFlowLogs.ps1	5	1
A	Parsers\ASimAuthentication\ProductParsers\ASimAuthenticationAADNonInteractive.yaml	5	-
A	Hunting Queries\ThreatIntelligenceIndicator\FileEntity_SecurityEvent.yaml	5	-