Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Included logs-o365* index #2446

Open
oliver-creed opened this issue Dec 30, 2022 · 1 comment
Open

Included logs-o365* index #2446

oliver-creed opened this issue Dec 30, 2022 · 1 comment
Assignees
@terrancedejesus
Labels
backlog community Rule: Tuning tweaking or tuning an existing rule

Comments

@oliver-creed
Copy link

detection-rules/rules/integrations/azure/initial_access_consent_grant_attack_via_azure_registered_application.toml

Line 17 in ac01718

index = ["filebeat-*", "logs-azure*"]

this should included the logs-o365* index as well
@botelastic
Copy link

botelastic bot commented Feb 28, 2023

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

@botelastic botelastic bot added the stale 60 days of inactivity label Feb 28, 2023
@w0rk3r w0rk3r added the backlog label Feb 28, 2023
@botelastic botelastic bot removed the stale 60 days of inactivity label Feb 28, 2023
@brokensound77 brokensound77 added the Rule: Tuning tweaking or tuning an existing rule label Dec 7, 2023
@w0rk3r w0rk3r self-assigned this May 28, 2024
@w0rk3r w0rk3r assigned terrancedejesus and unassigned w0rk3r Jul 31, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@terrancedejesus terrancedejesus

Labels
backlog community Rule: Tuning tweaking or tuning an existing rule
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
4 participants
@brokensound77 @w0rk3r @terrancedejesus @oliver-creed