مكتب الأمن

Generate a tuned Microsoft Sentinel detection for security group change with field mapping and false-positive guidance

Generate a tuned Microsoft Sentinel detection for mailbox forwarding rule created with field mapping and false-positive guidance

Generate a tuned Microsoft Sentinel detection for lateral movement via psexec with field mapping and false-positive guidance

Generate a tuned Microsoft Sentinel detection for pass-the-hash with field mapping and false-positive guidance

Generate a tuned Microsoft Sentinel detection for credential dumping (lsass access) with field mapping and false-positive guidance

Generate a tuned Microsoft Sentinel detection for registry run key persistence with field mapping and false-positive guidance

Generate a tuned Microsoft Sentinel detection for unusual parent-child process with field mapping and false-positive guidance

Generate a tuned Elastic Security detection for brute force login with field mapping and false-positive guidance

Generate a tuned Elastic Security detection for password spray with field mapping and false-positive guidance

Generate a tuned Elastic Security detection for new admin account created with field mapping and false-positive guidance

Generate a tuned Elastic Security detection for privileged group membership change with field mapping and false-positive guidance

Generate a tuned Elastic Security detection for security log cleared with field mapping and false-positive guidance

Generate a tuned Elastic Security detection for suspicious powershell execution with field mapping and false-positive guidance

Generate a tuned Elastic Security detection for ransomware file activity with field mapping and false-positive guidance

Generate a tuned Elastic Security detection for cloud admin login without mfa with field mapping and false-positive guidance

Generate a tuned Elastic Security detection for mailbox forwarding rule created with field mapping and false-positive guidance

Generate a tuned Elastic Security detection for credential dumping (lsass access) with field mapping and false-positive guidance

Generate a tuned Wazuh detection for brute force login with field mapping and false-positive guidance

Generate a tuned Wazuh detection for password spray with field mapping and false-positive guidance

Generate a tuned Wazuh detection for new admin account created with field mapping and false-positive guidance

Generate a tuned Wazuh detection for privileged group membership change with field mapping and false-positive guidance

Generate a tuned Wazuh detection for security log cleared with field mapping and false-positive guidance

Generate a tuned Wazuh detection for suspicious powershell execution with field mapping and false-positive guidance

Generate a tuned Wazuh detection for ransomware file activity with field mapping and false-positive guidance