Tags
Top 20 Tags
- Solutions (593)
- DataConnectors (364)
- Updated (255)
- CCF (218)
- New (209)
- Critical-Fix (163)
- Parsers (148)
- Detections (122)
- Function App (113)
- Workbooks (108)
- Maintenance (105)
- Other: CI Config (104)
- ASIM (96)
- Threat Intelligence (85)
- Hunting Queries (68)
- Playbooks (67)
- Tools (63)
- DCR (57)
- Microsoft (53)
- Other: Assets (41)
All Tags
- 'Other: Assets' (2)
- 'Other: CI Config' (3)
- 42Crunch (1)
- 42Crunch API Security Platform (1)
- A365 (1)
- Abnormal (2)
- Abnormal Security (4)
- AbuseIPDB (1)
- Acer (1)
- Acer EDC EDCRule (1)
- Acronis (1)
- Acronis Cyber Protect Cloud (1)
- AI (11)
- Airlock (1)
- Airlock Digital (1)
- AIX (1)
- Akamai (2)
- Akamai Guardicore (1)
- Akamai Prolexic (1)
- Alibaba (1)
- Alibaba Cloud (2)
- Alibaba Cloud Networking (2)
- Amazon (3)
- Amazon EKS (2)
- Amazon Elastic Kubernetes Service (1)
- Amazon S3 (2)
- Amazon Web Services (7)
- Anthropic (2)
- Anthropic Claude Compliance (1)
- Anvilogic (1)
- Apache Log4j (1)
- Apache Log4j Vulnerability Detection (1)
- Application Detection and Response (3)
- Armis (1)
- Artificial Intelligence (5)
- ASIM (96)
- Atlassian (4)
- Atlassian Confluence Audit (1)
- Atlassian Jira (2)
- Atlassian Organization Audit Logs (1)
- Attack Surface Management (5)
- Audit (2)
- Auth0 (4)
- Authomize (2)
- AWS (26)
- AWS Access Logs (1)
- AWS Athena (1)
- AWS CloudTrail (3)
- AWS EKS (1)
- AWS Elastic Load Balancer (1)
- AWS Elastic Load Balancing (1)
- AWS Network Firewall (1)
- AWS S3 (2)
- AWS Security Hub (3)
- Azure (5)
- Azure Activity (1)
- Azure DevOps Auditing (3)
- Azure Firewall (7)
- Azure Key Vault (1)
- Azure Resource Graph (1)
- Azure Security Benchmark (2)
- Azure SQL Database (1)
- Azure Web Application Firewall (WAF) (3)
- Backup (4)
- BeyondTrust (3)
- BeyondTrust PM Cloud (3)
- BigID (4)
- Bitdefender (5)
- Bitdefender GravityZone (5)
- Bitsight (7)
- Blacklens.io (3)
- BloodHound Enterprise (5)
- BlueVoyant (3)
- BlueVoyant Anthropic Claude Compliance API (1)
- Box (5)
- BSM (1)
- Business Email Compromise - Financial Fraud (1)
- CCF (218)
- Censys (2)
- Check Point (5)
- Check Point Cyberint (1)
- Check Point Cyberint Alerts (2)
- Check Point Cyberint IOC (1)
- Check Point Email Security (1)
- Check Point Firewall (1)
- Check Point Smart Defense (1)
- Checkmarx (4)
- Cisco (31)
- Cisco Duo (2)
- Cisco Duo Security (2)
- Cisco Firepower Threat Defense (2)
- Cisco IOS (1)
- Cisco ISE (3)
- Cisco Meraki (3)
- Cisco Meraki Events via REST API (1)
- Cisco Secure Email Gateway (1)
- Cisco Secure Email Threat Defense (1)
- Cisco Secure Endpoint (2)
- Cisco Umbrella (11)
- CiscoDuoSecurity (4)
- Citrix (1)
- Citrix Analytics for Security (1)
- Claroty (2)
- Claude Compliance (1)
- Claude Compliance API (1)
- Cloudflare (3)
- Cloudflare CCF (1)
- CMMC (1)
- Cofense (2)
- Cofense Intelligence (2)
- Commvault (3)
- Commvault Security IQ (3)
- Compliance (5)
- Conditional Access (3)
- Continuous Diagnostics&Mitigation (2)
- Contrast (3)
- Contrast ADR (3)
- Contrast Security (2)
- Contrast Security ADR (1)
- Copilot (1)
- Corelight (5)
- Critical-Fix (163)
- CrowdStrike (16)
- CrowdStrike Falcon Endpoint Protection (12)
- CTM360 (1)
- CVE-2021-44228 (2)
- CVE-2023-46604 (1)
- CyberArk (7)
- CyberArk Audit (7)
- CyberArk Endpoint Privilege Manager (1)
- CyberArk EPM (1)
- Cybersixgill (3)
- Cybersixgill Actionable Alerts (2)
- Cyble (1)
- Cyble Vision (2)
- Cyera (3)
- Cyera DSPM (5)
- CYJAX (2)
- Cyren (8)
- Cyren-SentinelOne Threat Intelligence (2)
- Cyren Threat Intelligence (5)
- Cyren-CrowdStrike Threat Intelligence (1)
- D3 (3)
- D3 Security (1)
- D3 Security Smart SOAR (1)
- D3 Smart SOAR (4)
- Darktrace (3)
- Darktrace Cyber AI Analyst (1)
- Data Connectors (3)
- Data443 (1)
- DataBahn (2)
- DataConnectors (364)
- Dataminr (2)
- Dataminr Pulse (2)
- Datawiza (1)
- DCR (57)
- Defender for Endpoint (12)
- Deprecated (13)
- Derdack (1)
- Detections (122)
- DHCP (3)
- Digital Shadows SearchLight (1)
- DLP (2)
- DNS (11)
- Documentation (34)
- DocuSign (1)
- Dynatrace (3)
- EDCRule (1)
- EDR (2)
- Elastic (1)
- Elastic Agent (1)
- Email Security (5)
- Ermes (1)
- Ermes Browser Security (1)
- ESET (6)
- ESET PROTECT Platform (6)
- Extended Threat Intelligence Platform (1)
- ExtraHop (2)
- ExtraHop RevealX (2)
- Feedly (5)
- Feedly Threat Intelligence (1)
- Field Effect (1)
- Field Effect MDR (1)
- FileWall (1)
- FIM (1)
- Flare (1)
- Fortinet (9)
- Fortinet FortiGate (5)
- Fortinet FortiGate Next-Generation Firewall (1)
- Fortinet FortiNDR Cloud (3)
- Fortra (1)
- Fortra Agari (1)
- Frends (1)
- Frends IPaaS (1)
- Function App (113)
- Functions (1)
- Gambit (1)
- Gambit Security (1)
- GCP (26)
- GDPR Compliance Data Security (5)
- Gigamon (1)
- Gigamon Connector (1)
- GitHub (11)
- GitHub Actions (1)
- GitHub Advanced Security (3)
- Global Secure Access (2)
- Google (10)
- Google Cloud Platform Cloud Monitoring (1)
- Google Cloud Platform IAM (1)
- Google Cloud Platform Security Command Center (1)
- Google Cloud Security (1)
- Google Kubernetes Engine (1)
- Google SecOps (3)
- Google Threat Intelligence (4)
- Google Workspace Reports (3)
- GoogleCloudPlatformIAM (1)
- GreyNoise (2)
- GreyNoise Intelligence (1)
- GreyNoise Threat Intelligence (1)
- Halcyon (2)
- HIPAA Compliance (1)
- Holm (1)
- Holm Security (1)
- Hunting Queries (68)
- Hybrid Attack - Cloud & Identity (1)
- Hybrid Attack — Cloud & Identity Kill-Chain (2)
- Iboss (1)
- Illumio (6)
- Illumio CloudSecure (1)
- Illumio Insight (2)
- Illumio Insights (2)
- Imperva (4)
- Imperva Cloud WAF (4)
- Infoblox (4)
- Infoblox NIOS (2)
- Infoblox SOC Insights (1)
- Intel471 (1)
- IONIX (1)
- IPinfo (4)
- Island (1)
- Jamf Protect (1)
- Joe (2)
- Joe Sandbox (4)
- JoeSandbox (1)
- Keeper Security (1)
- Known Issues Documentation (1)
- Kubernetes (1)
- Linux (2)
- Linux Sysmon (1)
- Lookout (10)
- Lumen (3)
- Lumen Defender Threat Feed (3)
- Lumen Threat Intelligence (1)
- MacOS (1)
- MailRisk (1)
- Maintenance (105)
- Malware Analysis (6)
- Managed Detection and Response (1)
- MDR (1)
- MDTI (1)
- Meraki (1)
- MeshStack (2)
- Microsoft (53)
- Microsoft 365 (3)
- Microsoft 365 Defender (13)
- Microsoft Agent 365 (5)
- Microsoft Agent 365 Observability (2)
- Microsoft Azure Security Benchmark (1)
- Microsoft Azure SQL Database (1)
- Microsoft Business Applications (3)
- Microsoft Copilot (5)
- Microsoft Defender for Cloud (1)
- Microsoft Defender for Endpoint (3)
- Microsoft Defender for IoT (1)
- Microsoft Defender Threat Intelligence (1)
- Microsoft Defender XDR (23)
- Microsoft Entra ID (36)
- Microsoft Entra ID Assets (2)
- Microsoft Entra ID Protection (1)
- Microsoft Global Secure Access (1)
- Microsoft Purview (1)
- Microsoft Security Copilot (3)
- Microsoft Security Events (1)
- Microsoft Sentinel (3)
- Microsoft Sentinel Content Hub (2)
- Microsoft Sentinel SOAR Essentials (1)
- Microsoft Threat Intelligence (1)
- Mimecast (2)
- Miro (1)
- MISP2Sentinel (1)
- MITRE ATT&CK (2)
- Mobile Security (3)
- Mobile Threat Defense (2)
- MongoDB (4)
- MongoDB Atlas (7)
- Morphisec (1)
- MuleSoft (5)
- MuleSoft Anypoint Security (2)
- NCSC-NL NDN Cyber Threat Intelligence Sharing (1)
- NetApp (1)
- NetApp Ransomware Resilience (1)
- Netskope (7)
- Netskope Secure Web Gateway (1)
- Netskope Security Cloud (2)
- Netskope Web Transactions (1)
- Network (6)
- Network Detection and Response (4)
- Network Session Essentials (1)
- New (209)
- NordStellar (1)
- NVISO (1)
- NXLog (1)
- NXLog AIX Audit (1)
- NXLog BSM MacOS (1)
- NXLog DNS Logs (1)
- NXLog FIM (1)
- NXLog LinuxAudit (1)
- Obsidian Datasharing (3)
- Okta (7)
- Okta Single Sign-On (5)
- OneTrust (2)
- Open Systems (6)
- OpenAI (3)
- Oracle (2)
- Oracle Cloud Infrastructure (5)
- Orca Security (1)
- Other: .Gitignore (4)
- Other: ASIM Schemas (19)
- Other: Assets (41)
- Other: CI Config (104)
- Other: Cspell-Dictionaries (2)
- Other: Functions (1)
- Other: Sample Data (20)
- P0 (11)
- Palo Alto (6)
- Palo Alto Cortex XDR (1)
- Palo Alto GlobalProtect (2)
- Palo Alto Networks Cortex XDR (1)
- Palo Alto PAN-OS (2)
- Palo Alto Prisma Cloud (2)
- PAM (11)
- Panorays (2)
- Parsers (148)
- Pathlock (3)
- Pathlock TDnR (2)
- Pathlock Threat Detection and Response (1)
- Playbooks (67)
- Proofpoint (7)
- Proofpoint on Demand Email Security (2)
- Proofpoint on Demand(POD) Email Security (3)
- Proofpoint TAP (7)
- QRadar (1)
- Qualys (7)
- Qualys VM (8)
- Qualys VM KnowledgeBase (1)
- Qualys Vulnerability Management KnowledgeBase (1)
- Quokka (1)
- Rapid7 (2)
- Rapid7 InsightVM (3)
- Recorded Future (6)
- Recorded Future Identity (1)
- Recorded Future Identity Intelligence (1)
- Red (1)
- Red Sift (1)
- RSAID Plus_Admin Logs_Connector (1)
- Rubrik (1)
- Rubrik Security Cloud (2)
- SailPoint (3)
- SailPoint IdentityNow (6)
- Salesforce (7)
- Salesforce Service Cloud (8)
- Salesforce Service Cloud V2 (1)
- Sample Data (26)
- Samsung Knox (1)
- SAP (22)
- SAP BTP (4)
- SAP Business Technology Platform (1)
- SAP Enterprise Threat Detection (2)
- SAP LogServ (1)
- SAP S/4HANA Cloud Public Edition (1)
- SAP S4 Cloud Public Edition (1)
- Security Operations (1)
- SecurityBridge App (1)
- Semperis (2)
- Semperis Lightning Intelligence (2)
- SentinelOne (13)
- SentinelOne Singularity (2)
- SentinelSOARessentials (1)
- Seraphic (1)
- Seraphic Security (1)
- SIGNL4 (1)
- Silverfort (1)
- Slack (1)
- Slack Audit (2)
- Snowflake (6)
- SOC Handbook (1)
- SOC Prime (2)
- SOC Prime CCF (1)
- SOC Prime Threat Detection Marketplace (1)
- SOCRadar (2)
- Solutions (593)
- Sonrai (1)
- Sonrai Security (1)
- Sophos (2)
- Sophos Endpoint (1)
- Sophos Endpoint Protection (2)
- SOX IT Compliance (1)
- SpecterOps (3)
- Spur (1)
- SQL Server (1)
- Squadra Technologies (1)
- Squadra Technologies SecRMM (1)
- SSH (4)
- Standalone (3)
- Static Application Security Testing (2)
- StealthTalk (2)
- Strider (1)
- Strider Shield (1)
- T0813 (1)
- T0826 (1)
- T0827 (1)
- T0859 (1)
- T1002 (1)
- T1003 (2)
- T1003.001 (2)
- T1005 (2)
- T1008 (1)
- T1011 (1)
- T1012 (1)
- T1016 (1)
- T1018 (3)
- T1020 (5)
- T1021 (7)
- T1021.001 (1)
- T1025 (1)
- T1027 (1)
- T1036 (2)
- T1041 (6)
- T1046 (4)
- T1047 (1)
- T1048 (5)
- T1053 (1)
- T1053.007 (1)
- T1055 (3)
- T1059 (11)
- T1059.001 (2)
- T1059.003 (1)
- T1059.004 (1)
- T1068 (1)
- T1069.002 (1)
- T1069.003 (2)
- T1070 (3)
- T1071 (15)
- T1071.001 (3)
- T1074 (1)
- T1078 (29)
- T1078.001 (1)
- T1078.003 (2)
- T1078.004 (12)
- T1082 (4)
- T1083 (2)
- T1087 (4)
- T1087.002 (1)
- T1087.003 (1)
- T1087.004 (2)
- T1095 (2)
- T1098 (19)
- T1098.001 (8)
- T1098.003 (10)
- T1098.004 (1)
- T1098.005 (1)
- T1102 (1)
- T1105 (2)
- T1110 (15)
- T1110.001 (5)
- T1110.002 (1)
- T1110.003 (5)
- T1110.004 (2)
- T1119 (2)
- T1133 (6)
- T1134 (3)
- T1134.003 (1)
- T1135 (1)
- T1136 (1)
- T1136.001 (1)
- T1136.003 (5)
- T1187 (1)
- T1189 (1)
- T1190 (14)
- T1195 (3)
- T1199 (1)
- T1200 (3)
- T1204 (9)
- T1204.002 (3)
- T1204.003 (1)
- T1210 (3)
- T1211 (1)
- T1212 (1)
- T1213 (2)
- T1213.006 (1)
- T1219 (2)
- T1222 (1)
- T1484 (1)
- T1484.001 (1)
- T1484.002 (2)
- T1485 (7)
- T1486 (4)
- T1489 (4)
- T1490 (1)
- T1496 (2)
- T1498 (4)
- T1498.001 (1)
- T1499 (4)
- T1499.002 (1)
- T1505.001 (1)
- T1525 (1)
- T1526 (4)
- T1528 (8)
- T1529 (1)
- T1530 (5)
- T1531 (3)
- T1535 (1)
- T1537 (2)
- T1539 (1)
- T1546 (3)
- T1548 (2)
- T1550 (2)
- T1550.001 (3)
- T1552 (5)
- T1552.007 (1)
- T1553.002 (1)
- T1555 (3)
- T1556 (5)
- T1556.006 (5)
- T1558.003 (1)
- T1562 (17)
- T1562.001 (9)
- T1562.004 (3)
- T1562.006 (2)
- T1562.007 (2)
- T1562.008 (4)
- T1563 (1)
- T1564.003 (1)
- T1565 (1)
- T1565.001 (3)
- T1566 (22)
- T1566.001 (2)
- T1566.002 (4)
- T1567 (6)
- T1567.002 (3)
- T1568 (1)
- T1568.001 (1)
- T1568.002 (2)
- T1570 (2)
- T1571 (2)
- T1572 (1)
- T1574.002 (1)
- T1578 (1)
- T1578.005 (1)
- T1580 (2)
- T1583 (2)
- T1588.003 (1)
- T1589 (3)
- T1590 (2)
- T1590.005 (1)
- T1591 (1)
- T1592 (2)
- T1593 (2)
- T1595 (7)
- T1595.001 (1)
- T1596 (2)
- T1606 (2)
- T1609 (1)
- T1613 (1)
- T1619 (1)
- T1621 (1)
- T1651 (1)
- TacitRed (5)
- TacitRed Defender Threat Intelligence (2)
- TacitRed SentinelOne (4)
- TacitRed Threat Intelligence (2)
- Tanium (4)
- Team Cymru Scout (1)
- Teams (5)
- Tenable (3)
- Tenable App (2)
- Tenable IO (1)
- Tenable Mobile App (1)
- Tenable Web App Scanning (1)
- TheHive (4)
- Threat Intelligence (85)
- Threat Intelligence (NEW) (6)
- Threat Intelligence Pty Ltd (1)
- Tools (63)
- Trellix (2)
- Trend Micro (7)
- Trend Micro Cloud App Security (3)
- Trend Micro Vision One (3)
- Trend Vision One (2)
- Tropico (1)
- Ubiquiti (1)
- Ubiquiti UniFi Site Manager (1)
- UEBA Essentials (2)
- Updated (255)
- Upwind (3)
- Utimaco (1)
- Utimaco ESKM (1)
- Vaikora (10)
- Vaikora Azure Security Center (3)
- Vaikora CrowdStrike Threat Intelligence (1)
- Vaikora for O365 (1)
- Vaikora Sentinel (1)
- Vaikora SentinelOne Threat Intelligence (1)
- Valimail (2)
- Valimail Enforce (2)
- Varonis (4)
- Varonis for Microsoft Purview (1)
- Varonis Purview (2)
- Vectra (2)
- Vectra AI XDR (1)
- Vectra XDR (3)
- Veeam (4)
- Versasec (2)
- Versasec CMS (2)
- VirtualMetric DataStream (2)
- Visa (7)
- Visa Threat Intelligence (6)
- Visa Threat Intelligence (VTI) (1)
- VMRay (3)
- VMware (8)
- VMware Carbon Black Cloud (2)
- VMware ESXi (4)
- VMware VCenter (3)
- VMware Workspace ONE (1)
- Vulnerability Management (6)
- WAF (8)
- Watchlists (1)
- Windows (2)
- Windows Security Events (4)
- Windows Server DNS (1)
- WithSecure (4)
- WithSecure Elements (3)
- WithSecure Elements via Function (2)
- Wiz (2)
- Workbooks (108)
- Workday (1)
- XBOW (2)
- Zero (1)
- Zero Networks (1)
- ZeroFox (6)
- ZeroFox Alerts (1)
- ZeroFox Threat Intelligence (3)
- ZeroNetworks (1)
- Zimperium (2)
- Zimperium Mobile Threat Defense (2)
- Zoom (1)
- Zoom Reports (1)
- ZoomReports (5)
- Zscaler (2)
- Zscaler Internet Access (3)
- Zscaler Private Access (ZPA) (1)