Browse Rules

Search and filter across all detection sources

440 rules

sagan medium other

[SNORT] Bad Traffic

[SNORT] Bad Traffic
sagan medium other

TCP Treason uncloaked

TCP Treason uncloaked
sagan medium other

[ADTRAN] TCP INTERNAL BLOCK

[ADTRAN] TCP INTERNAL BLOCK
sagan medium other

[ADTRAN] UDP INTERNAL BLOCK

[ADTRAN] UDP INTERNAL BLOCK
sagan medium other

[MCAS] Mass Download Attempt

[MCAS] Mass Download Attempt
sagan medium other

[MIMECAST] Internal email protection

[MIMECAST] Internal email protection
sagan medium other

[PASSWORDSTATE] Password Reset Failed

[PASSWORDSTATE] Password Reset Failed
sagan medium other

[SYSLOG] Martian source packet

[SYSLOG] Martian source packet
sagan medium other

[CLOUDTRAIL] cloudtrail event detected - (StopLogging)

[CLOUDTRAIL] cloudtrail event detected - (StopLogging)
sagan medium other

[DARKTRACE] Potential Malicious Antigena Alert

[DARKTRACE] Potential Malicious Antigena Alert
sagan medium other

[DARKTRACE] Potential Malicious Compliance Alert

[DARKTRACE] Potential Malicious Compliance Alert
sagan medium other

[DARKTRACE] Potential Malicious Compromise Alert

[DARKTRACE] Potential Malicious Compromise Alert
sagan medium other

[DARKTRACE] Potential Malicious Device Alert

[DARKTRACE] Potential Malicious Device Alert
sagan medium other

[DARKTRACE] Potential Malicious Infrastructure Alert

[DARKTRACE] Potential Malicious Infrastructure Alert
sagan medium other

[DARKTRACE] Potential Malicious System Alert

[DARKTRACE] Potential Malicious System Alert
sagan medium other

[DARKTRACE] Potential Malicious traffic detection

[DARKTRACE] Potential Malicious traffic detection
sagan medium other

[DARKTRACE] Potential Malicious User Alert

[DARKTRACE] Potential Malicious User Alert
sagan medium other

[MCAS] Possible Unknown MCAS Alert

[MCAS] Possible Unknown MCAS Alert
sagan medium other

[AZURE-EVENTHUB-AD] unknownFutureValue Event Detected

[AZURE-EVENTHUB-AD] unknownFutureValue Event Detected
sagan medium other

[CLOUDTRAIL] AutoScaling cloudtrail event detected - (AttachLoadBalancers)

[CLOUDTRAIL] AutoScaling cloudtrail event detected - (AttachLoadBalancers)
sagan medium other

[CLOUDTRAIL] AutoScaling cloudtrail event detected - (DeletePolicy)

[CLOUDTRAIL] AutoScaling cloudtrail event detected - (DeletePolicy)
sagan medium other

[CLOUDTRAIL] AutoScaling cloudtrail event detected - (DetachLoadBalancers)

[CLOUDTRAIL] AutoScaling cloudtrail event detected - (DetachLoadBalancers)
sagan medium other

[CLOUDTRAIL] AutoScaling cloudtrail event detected - (PutScalingPolicy)

[CLOUDTRAIL] AutoScaling cloudtrail event detected - (PutScalingPolicy)
sagan medium other

[CLOUDTRAIL] AutoScaling cloudtrail event detected - (TerminateInstanceInAutoScalingGroup)

[CLOUDTRAIL] AutoScaling cloudtrail event detected - (TerminateInstanceInAutoScalingGroup)
sagan medium other

[CLOUDTRAIL] CloudFormation cloudtrail event detected - (CancelUpdateStack)

[CLOUDTRAIL] CloudFormation cloudtrail event detected - (CancelUpdateStack)