أدوات عملية لمسؤولي الأنظمة والشبكات والأمن والعمليات.

SEC

مكتب الأمن

التجزئات، الترميز، الرؤوس، والفحوصات التي تفضل تشغيلها بنفسك. لا شيء هنا يطلب حساباً.

433–456 / 915

IBM QRadar Suspicious PowerShell Execution Detection Generator

متاح

Generate a tuned IBM QRadar detection for suspicious powershell execution with field mapping and false-positive guidance

فتح الأداة

IBM QRadar Ransomware File Activity Detection Generator

متاح

Generate a tuned IBM QRadar detection for ransomware file activity with field mapping and false-positive guidance

فتح الأداة

IBM QRadar Cloud Admin Login Without MFA Detection Generator

متاح

Generate a tuned IBM QRadar detection for cloud admin login without mfa with field mapping and false-positive guidance

فتح الأداة

IBM QRadar Mailbox Forwarding Rule Created Detection Generator

متاح

Generate a tuned IBM QRadar detection for mailbox forwarding rule created with field mapping and false-positive guidance

فتح الأداة

IBM QRadar Credential Dumping (LSASS Access) Detection Generator

متاح

Generate a tuned IBM QRadar detection for credential dumping (lsass access) with field mapping and false-positive guidance

فتح الأداة

Google SecOps Brute Force Login Detection Generator

متاح

Generate a tuned Google SecOps detection for brute force login with field mapping and false-positive guidance

فتح الأداة

Google SecOps Password Spray Detection Generator

متاح

Generate a tuned Google SecOps detection for password spray with field mapping and false-positive guidance

فتح الأداة

Google SecOps New Admin Account Created Detection Generator

متاح

Generate a tuned Google SecOps detection for new admin account created with field mapping and false-positive guidance

فتح الأداة

Google SecOps Privileged Group Membership Change Detection Generator

متاح

Generate a tuned Google SecOps detection for privileged group membership change with field mapping and false-positive guidance

فتح الأداة

Google SecOps Security Log Cleared Detection Generator

متاح

Generate a tuned Google SecOps detection for security log cleared with field mapping and false-positive guidance

فتح الأداة

Google SecOps Suspicious PowerShell Execution Detection Generator

متاح

Generate a tuned Google SecOps detection for suspicious powershell execution with field mapping and false-positive guidance

فتح الأداة

Google SecOps Ransomware File Activity Detection Generator

متاح

Generate a tuned Google SecOps detection for ransomware file activity with field mapping and false-positive guidance

فتح الأداة

Google SecOps Cloud Admin Login Without MFA Detection Generator

متاح

Generate a tuned Google SecOps detection for cloud admin login without mfa with field mapping and false-positive guidance

فتح الأداة

Google SecOps Mailbox Forwarding Rule Created Detection Generator

متاح

Generate a tuned Google SecOps detection for mailbox forwarding rule created with field mapping and false-positive guidance

فتح الأداة

Google SecOps Credential Dumping (LSASS Access) Detection Generator

متاح

Generate a tuned Google SecOps detection for credential dumping (lsass access) with field mapping and false-positive guidance

فتح الأداة

Wazuh Impossible Travel Detection Generator

متاح

Generate a tuned Wazuh detection for impossible travel with field mapping and false-positive guidance

فتح الأداة

Wazuh Account Lockout Spike Detection Generator

متاح

Generate a tuned Wazuh detection for account lockout spike with field mapping and false-positive guidance

فتح الأداة

Wazuh MFA Fatigue Detection Generator

متاح

Generate a tuned Wazuh detection for mfa fatigue with field mapping and false-positive guidance

فتح الأداة

Wazuh Login from Tor or Anonymizer Detection Generator

متاح

Generate a tuned Wazuh detection for login from tor or anonymizer with field mapping and false-positive guidance

فتح الأداة

Wazuh Service Account Interactive Logon Detection Generator

متاح

Generate a tuned Wazuh detection for service account interactive logon with field mapping and false-positive guidance

فتح الأداة

Wazuh New Scheduled Task Created Detection Generator

متاح

Generate a tuned Wazuh detection for new scheduled task created with field mapping and false-positive guidance

فتح الأداة

Wazuh New Service Installed Detection Generator

متاح

Generate a tuned Wazuh detection for new service installed with field mapping and false-positive guidance

فتح الأداة

Wazuh Office App Spawning Shell Detection Generator

متاح

Generate a tuned Wazuh detection for office app spawning shell with field mapping and false-positive guidance

فتح الأداة

Wazuh Security Tool Disabled Detection Generator

متاح

Generate a tuned Wazuh detection for security tool disabled with field mapping and false-positive guidance

فتح الأداة