Browse Rules

Search and filter across all detection sources

323 rules

sagan high other

[MSEXCHANGE-MANAGEMENT] policy-and-compliance-content-search Cmdlet Get-ComplianceSearch Successfully Executed

[MSEXCHANGE-MANAGEMENT] policy-and-compliance-content-search Cmdlet Get-ComplianceSearch Successfully Executed
sagan high other

[MSEXCHANGE-MANAGEMENT] policy-and-compliance-content-search Cmdlet Get-ComplianceSearchAction Successfully Executed

[MSEXCHANGE-MANAGEMENT] policy-and-compliance-content-search Cmdlet Get-ComplianceSearchAction Successfully Executed
sagan high other

[MSEXCHANGE-MANAGEMENT] policy-and-compliance-content-search Cmdlet Get-ComplianceSecurityFilter Successfully Executed

[MSEXCHANGE-MANAGEMENT] policy-and-compliance-content-search Cmdlet Get-ComplianceSecurityFilter Successfully Executed
sagan high other

[MSEXCHANGE-MANAGEMENT] policy-and-compliance-content-search Cmdlet Invoke-ComplianceSearchActionStep Successfully Executed

[MSEXCHANGE-MANAGEMENT] policy-and-compliance-content-search Cmdlet Invoke-ComplianceSearchActionStep Successfully Executed
sagan high other

[MSEXCHANGE-MANAGEMENT] policy-and-compliance-content-search Cmdlet New-ComplianceSearch Successfully Executed

[MSEXCHANGE-MANAGEMENT] policy-and-compliance-content-search Cmdlet New-ComplianceSearch Successfully Executed
sagan high other

[MSEXCHANGE-MANAGEMENT] policy-and-compliance-content-search Cmdlet New-ComplianceSearchAction Successfully Executed

[MSEXCHANGE-MANAGEMENT] policy-and-compliance-content-search Cmdlet New-ComplianceSearchAction Successfully Executed
sagan high other

[MSEXCHANGE-MANAGEMENT] policy-and-compliance-content-search Cmdlet New-ComplianceSecurityFilter Successfully Executed

[MSEXCHANGE-MANAGEMENT] policy-and-compliance-content-search Cmdlet New-ComplianceSecurityFilter Successfully Executed
sagan high other

[MSEXCHANGE-MANAGEMENT] policy-and-compliance-content-search Cmdlet Remove-ComplianceSearch Successfully Executed

[MSEXCHANGE-MANAGEMENT] policy-and-compliance-content-search Cmdlet Remove-ComplianceSearch Successfully Executed
sagan high other

[MSEXCHANGE-MANAGEMENT] policy-and-compliance-content-search Cmdlet Remove-ComplianceSearchAction Successfully Executed

[MSEXCHANGE-MANAGEMENT] policy-and-compliance-content-search Cmdlet Remove-ComplianceSearchAction Successfully Executed
sagan high other

[MSEXCHANGE-MANAGEMENT] policy-and-compliance-content-search Cmdlet Remove-ComplianceSecurityFilter Successfully Executed

[MSEXCHANGE-MANAGEMENT] policy-and-compliance-content-search Cmdlet Remove-ComplianceSecurityFilter Successfully Executed
sagan high other

[MSEXCHANGE-MANAGEMENT] policy-and-compliance-content-search Cmdlet Set-ComplianceSearch Successfully Executed

[MSEXCHANGE-MANAGEMENT] policy-and-compliance-content-search Cmdlet Set-ComplianceSearch Successfully Executed
sagan high other

[MSEXCHANGE-MANAGEMENT] policy-and-compliance-content-search Cmdlet Set-ComplianceSearchAction Successfully Executed

[MSEXCHANGE-MANAGEMENT] policy-and-compliance-content-search Cmdlet Set-ComplianceSearchAction Successfully Executed
sagan high other

[MSEXCHANGE-MANAGEMENT] policy-and-compliance-content-search Cmdlet Set-ComplianceSecurityFilter Successfully Executed

[MSEXCHANGE-MANAGEMENT] policy-and-compliance-content-search Cmdlet Set-ComplianceSecurityFilter Successfully Executed
sagan high other

[MSEXCHANGE-MANAGEMENT] policy-and-compliance-content-search Cmdlet Start-ComplianceSearch Successfully Executed

[MSEXCHANGE-MANAGEMENT] policy-and-compliance-content-search Cmdlet Start-ComplianceSearch Successfully Executed
sagan high other

[MSEXCHANGE-MANAGEMENT] policy-and-compliance-content-search Cmdlet Stop-ComplianceSearch Successfully Executed

[MSEXCHANGE-MANAGEMENT] policy-and-compliance-content-search Cmdlet Stop-ComplianceSearch Successfully Executed
sagan medium other

[DARKTRACE] Potential Malicious Compliance Alert

[DARKTRACE] Potential Malicious Compliance Alert
sentinel medium kql

Best Practice Compliance Check Not Passed

Detects when a security best practice does not pass a compliance check in Veeam Security & Compliance Analyzer.
sagan low other

MSAPI Security Compliance Center device detected

MSAPI Security Compliance Center device detected
wazuh low xml

AWS Config - Snapshot Compliance [$(aws.awsAccountId) $(aws.awsRegion)] [$(aws.resourceType)] [$(aws.configuration.configRuleList.configRuleName)]: $(aws.resourceId) ($(aws.configurationItemStatus)) $(aws.configuration.complianceType)

AWS Config - Snapshot Compliance [$(aws.awsAccountId) $(aws.awsRegion)] [$(aws.resourceType)] [$(aws.configuration.configRuleList.configRuleName)]: $(aws.resourceId) ($(aws.configurationItemStatus)) $(aws.configuration.complianceType)
sentinel medium kql

Veeam ONE Backup Server Security and Compliance State

Detects backup server security and compliance state issues.
sagan high other

[MSEXCHANGE-MANAGEMENT] policy-and-compliance Cmdlet Disable-JournalArchiving Successfully Executed

[MSEXCHANGE-MANAGEMENT] policy-and-compliance Cmdlet Disable-JournalArchiving Successfully Executed
sagan high other

[MSEXCHANGE-MANAGEMENT] policy-and-compliance Cmdlet Disable-JournalRule Successfully Executed

[MSEXCHANGE-MANAGEMENT] policy-and-compliance Cmdlet Disable-JournalRule Successfully Executed
sagan high other

[MSEXCHANGE-MANAGEMENT] policy-and-compliance Cmdlet Disable-OutlookProtectionRule Successfully Executed

[MSEXCHANGE-MANAGEMENT] policy-and-compliance Cmdlet Disable-OutlookProtectionRule Successfully Executed
sagan high other

[MSEXCHANGE-MANAGEMENT] policy-and-compliance Cmdlet Disable-TransportRule Successfully Executed

[MSEXCHANGE-MANAGEMENT] policy-and-compliance Cmdlet Disable-TransportRule Successfully Executed
sagan high other

[MSEXCHANGE-MANAGEMENT] policy-and-compliance Cmdlet Enable-JournalRule Successfully Executed

[MSEXCHANGE-MANAGEMENT] policy-and-compliance Cmdlet Enable-JournalRule Successfully Executed