cloud-architekt/azuresentinel issues and pull requests

#24 - Update BlockingSSPRAttempts.yaml

Pull Request - State: closed - Opened by crmhh 7 days ago

#23 - Update SummaryOfFirstPartyServicePrincipals.kusto

Pull Request - State: closed - Opened by Cloud-Architekt 6 months ago

#22 - Use of inclusive language

Pull Request - State: closed - Opened by f-bader 6 months ago

#21 - Update AADConnectorAccount-OutsideOfWatchList.yaml

Pull Request - State: closed - Opened by Cloud-Architekt 6 months ago - 1 comment

#20 - Updated Entra Connect Server detections

Pull Request - State: closed - Opened by Cloud-Architekt 10 months ago

#19 - Update SuspiciousSSPRActivity.yaml

Pull Request - State: closed - Opened by crmhh 10 months ago

#18 - Update AADConnectorAccount-OutsideOfWatchList.yaml

Pull Request - State: closed - Opened by f-bader 10 months ago

#17 - Update AADConnectorAccount-AADActivitiesWithEnrichedInformation.yaml

Pull Request - State: closed - Opened by crmhh 12 months ago - 1 comment

#16 - Update RiskySignInToAzurePortal.yaml

Pull Request - State: closed - Opened by crmhh about 1 year ago - 1 comment

#15 - Always use has for tags to allow more then one tag per watchlist entry

Pull Request - State: closed - Opened by f-bader about 1 year ago

#14 - Added functions for Workload Identities

Pull Request - State: closed - Opened by Cloud-Architekt over 1 year ago

#13 - Correct the case of one letter in a column name in GraphActivityFromOtherIpAddress.kusto

Pull Request - State: closed - Opened by ep3p over 1 year ago

#12 - Updated queries related to workload ID and EntraOps

Pull Request - State: closed - Opened by Cloud-Architekt over 1 year ago

#11 - Update SuspiciousSSPRActivity.yaml

Pull Request - State: closed - Opened by crmhh over 1 year ago

#10 - Updated Detection of Microsoft Entra Connect accounts outside of WatchLists

Pull Request - State: closed - Opened by f-bader over 1 year ago

#9 - Added parameter "kind: Scheduled"

Pull Request - State: closed - Opened by f-bader over 1 year ago

#8 - Update FedCredAzActivityWithoutSignInWorkflow.yaml

Pull Request - State: closed - Opened by stephanwaelde about 2 years ago

#7 - Update UnusualAADConditionalAccessFailuresAfterPolicyChange.yaml