FilesExpand file tree

main

/

ml

/

Copy path

Directory actions

More options

More options

Directory actions

More options

More options

Latest commit

 

History

History

History

 

 

main

/

ml

/

Copy path

Top

Folders and files

Name		Name	Last commit message	Last commit date
parent directory ..
command_and_control_ml_packetbeat_dns_tunneling.toml		command_and_control_ml_packetbeat_dns_tunneling.toml
command_and_control_ml_packetbeat_rare_dns_question.toml		command_and_control_ml_packetbeat_rare_dns_question.toml
command_and_control_ml_packetbeat_rare_urls.toml		command_and_control_ml_packetbeat_rare_urls.toml
command_and_control_ml_packetbeat_rare_user_agent.toml		command_and_control_ml_packetbeat_rare_user_agent.toml
credential_access_ml_auth_spike_in_failed_logon_events.toml		credential_access_ml_auth_spike_in_failed_logon_events.toml
credential_access_ml_auth_spike_in_logon_events.toml		credential_access_ml_auth_spike_in_logon_events.toml
credential_access_ml_auth_spike_in_logon_events_from_a_source_ip.toml		credential_access_ml_auth_spike_in_logon_events_from_a_source_ip.toml
credential_access_ml_linux_anomalous_metadata_process.toml		credential_access_ml_linux_anomalous_metadata_process.toml
credential_access_ml_linux_anomalous_metadata_user.toml		credential_access_ml_linux_anomalous_metadata_user.toml
credential_access_ml_suspicious_login_activity.toml		credential_access_ml_suspicious_login_activity.toml
credential_access_ml_windows_anomalous_metadata_process.toml		credential_access_ml_windows_anomalous_metadata_process.toml
credential_access_ml_windows_anomalous_metadata_user.toml		credential_access_ml_windows_anomalous_metadata_user.toml
discovery_ml_linux_system_information_discovery.toml		discovery_ml_linux_system_information_discovery.toml
discovery_ml_linux_system_network_configuration_discovery.toml		discovery_ml_linux_system_network_configuration_discovery.toml
discovery_ml_linux_system_network_connection_discovery.toml		discovery_ml_linux_system_network_connection_discovery.toml
discovery_ml_linux_system_process_discovery.toml		discovery_ml_linux_system_process_discovery.toml
discovery_ml_linux_system_user_discovery.toml		discovery_ml_linux_system_user_discovery.toml
execution_ml_windows_anomalous_script.toml		execution_ml_windows_anomalous_script.toml
initial_access_ml_auth_rare_hour_for_a_user_to_logon.toml		initial_access_ml_auth_rare_hour_for_a_user_to_logon.toml
initial_access_ml_auth_rare_source_ip_for_a_user.toml		initial_access_ml_auth_rare_source_ip_for_a_user.toml
initial_access_ml_auth_rare_user_logon.toml		initial_access_ml_auth_rare_user_logon.toml
initial_access_ml_linux_anomalous_user_name.toml		initial_access_ml_linux_anomalous_user_name.toml
initial_access_ml_windows_anomalous_user_name.toml		initial_access_ml_windows_anomalous_user_name.toml
initial_access_ml_windows_rare_user_type10_remote_login.toml		initial_access_ml_windows_rare_user_type10_remote_login.toml
ml_high_count_events_for_a_host_name.toml		ml_high_count_events_for_a_host_name.toml
ml_high_count_network_denies.toml		ml_high_count_network_denies.toml
ml_high_count_network_events.toml		ml_high_count_network_events.toml
ml_linux_anomalous_network_activity.toml		ml_linux_anomalous_network_activity.toml
ml_linux_anomalous_network_port_activity.toml		ml_linux_anomalous_network_port_activity.toml
ml_low_count_events_for_a_host_name.toml		ml_low_count_events_for_a_host_name.toml
ml_packetbeat_rare_server_domain.toml		ml_packetbeat_rare_server_domain.toml
ml_rare_destination_country.toml		ml_rare_destination_country.toml
ml_spike_in_traffic_to_a_country.toml		ml_spike_in_traffic_to_a_country.toml
ml_windows_anomalous_network_activity.toml		ml_windows_anomalous_network_activity.toml
persistence_ml_linux_anomalous_process_all_hosts.toml		persistence_ml_linux_anomalous_process_all_hosts.toml
persistence_ml_rare_process_by_host_linux.toml		persistence_ml_rare_process_by_host_linux.toml
persistence_ml_rare_process_by_host_windows.toml		persistence_ml_rare_process_by_host_windows.toml
persistence_ml_windows_anomalous_path_activity.toml		persistence_ml_windows_anomalous_path_activity.toml
persistence_ml_windows_anomalous_process_all_hosts.toml		persistence_ml_windows_anomalous_process_all_hosts.toml
persistence_ml_windows_anomalous_process_creation.toml		persistence_ml_windows_anomalous_process_creation.toml
persistence_ml_windows_anomalous_service.toml		persistence_ml_windows_anomalous_service.toml
privilege_escalation_ml_linux_anomalous_sudo_activity.toml		privilege_escalation_ml_linux_anomalous_sudo_activity.toml
privilege_escalation_ml_windows_rare_user_runas_event.toml		privilege_escalation_ml_windows_rare_user_runas_event.toml
resource_development_ml_linux_anomalous_compiler_activity.toml		resource_development_ml_linux_anomalous_compiler_activity.toml
View all files