Практичные инструменты для системных, сетевых, security- и operations-администраторов.

SEC

Стол безопасности

Хеши, кодировки, заголовки и проверки, которые вы предпочитаете выполнять сами. Здесь не потребуют аккаунт.

409–432 / 915

Elastic Security Impossible Travel Detection Generator

Доступно

Generate a tuned Elastic Security detection for impossible travel with field mapping and false-positive guidance

Открыть инструмент

Elastic Security Account Lockout Spike Detection Generator

Доступно

Generate a tuned Elastic Security detection for account lockout spike with field mapping and false-positive guidance

Открыть инструмент

Elastic Security MFA Fatigue Detection Generator

Доступно

Generate a tuned Elastic Security detection for mfa fatigue with field mapping and false-positive guidance

Открыть инструмент

Elastic Security Login from Tor or Anonymizer Detection Generator

Доступно

Generate a tuned Elastic Security detection for login from tor or anonymizer with field mapping and false-positive guidance

Открыть инструмент

Elastic Security Service Account Interactive Logon Detection Generator

Доступно

Generate a tuned Elastic Security detection for service account interactive logon with field mapping and false-positive guidance

Открыть инструмент

Elastic Security New Scheduled Task Created Detection Generator

Доступно

Generate a tuned Elastic Security detection for new scheduled task created with field mapping and false-positive guidance

Открыть инструмент

Elastic Security New Service Installed Detection Generator

Доступно

Generate a tuned Elastic Security detection for new service installed with field mapping and false-positive guidance

Открыть инструмент

Elastic Security Office App Spawning Shell Detection Generator

Доступно

Generate a tuned Elastic Security detection for office app spawning shell with field mapping and false-positive guidance

Открыть инструмент

Elastic Security Security Tool Disabled Detection Generator

Доступно

Generate a tuned Elastic Security detection for security tool disabled with field mapping and false-positive guidance

Открыть инструмент

Elastic Security Kerberoasting Detection Generator

Доступно

Generate a tuned Elastic Security detection for kerberoasting with field mapping and false-positive guidance

Открыть инструмент

Elastic Security RDP Exposed to Internet Detection Generator

Доступно

Generate a tuned Elastic Security detection for rdp exposed to internet with field mapping and false-positive guidance

Открыть инструмент

Elastic Security Large Outbound Data Transfer Detection Generator

Доступно

Generate a tuned Elastic Security detection for large outbound data transfer with field mapping and false-positive guidance

Открыть инструмент

Elastic Security DNS Tunneling Detection Generator

Доступно

Generate a tuned Elastic Security detection for dns tunneling with field mapping and false-positive guidance

Открыть инструмент

Elastic Security Web Attack Patterns Detection Generator

Доступно

Generate a tuned Elastic Security detection for web attack patterns with field mapping and false-positive guidance

Открыть инструмент

Elastic Security Security Group Change Detection Generator

Доступно

Generate a tuned Elastic Security detection for security group change with field mapping and false-positive guidance

Открыть инструмент

Elastic Security Lateral Movement via PsExec Detection Generator

Доступно

Generate a tuned Elastic Security detection for lateral movement via psexec with field mapping and false-positive guidance

Открыть инструмент

Elastic Security Pass-the-Hash Detection Generator

Доступно

Generate a tuned Elastic Security detection for pass-the-hash with field mapping and false-positive guidance

Открыть инструмент

Elastic Security Registry Run Key Persistence Detection Generator

Доступно

Generate a tuned Elastic Security detection for registry run key persistence with field mapping and false-positive guidance

Открыть инструмент

Elastic Security Unusual Parent-Child Process Detection Generator

Доступно

Generate a tuned Elastic Security detection for unusual parent-child process with field mapping and false-positive guidance

Открыть инструмент

IBM QRadar Brute Force Login Detection Generator

Доступно

Generate a tuned IBM QRadar detection for brute force login with field mapping and false-positive guidance

Открыть инструмент

IBM QRadar Password Spray Detection Generator

Доступно

Generate a tuned IBM QRadar detection for password spray with field mapping and false-positive guidance

Открыть инструмент

IBM QRadar New Admin Account Created Detection Generator

Доступно

Generate a tuned IBM QRadar detection for new admin account created with field mapping and false-positive guidance

Открыть инструмент

IBM QRadar Privileged Group Membership Change Detection Generator

Доступно

Generate a tuned IBM QRadar detection for privileged group membership change with field mapping and false-positive guidance

Открыть инструмент

IBM QRadar Security Log Cleared Detection Generator

Доступно

Generate a tuned IBM QRadar detection for security log cleared with field mapping and false-positive guidance

Открыть инструмент