ML Rules
ml-scan-http-request
Detect web application attack. You must input a raw_data field that contains both HTTP headers and body.
Trellix Network Security
trellix-nx-hosts
Fetch hosts from Trellix Network Security devices
Trellix Network Security
trellix-nx-whitelist
Fetch IP whitelist from Trellix Network Security devices
Trellix Network Security
trellix-nx-malwares
Fetch malwares for host from Trellix Network Security devices
Trellix Network Security
trellix-nx-alerts
Fetch alerts from Trellix Network Security devices
Trellix Network Security
trellix-nx-flows
Fetch flows for alert from Trellix Network Security devices
Azure Network Watcher
azure-nsgflow-logs
Download NSG flow logs for a specified time range from Azure storage account.
Azure Network Watcher
azure-nsgflow-files
Enumerate NSG flow log blobs in the container in the Azure storage account.
Stellar Cyber
stellar-alerts
Get alerts from Stellar Cyber platform for a specified time period.
ML Rules
ml-scan-web-log
Detect anomaly web access. src_ip, status, method, path, query, user_agent fields are required.
Kakao Agit
agit-comment
Reply to an original post in a Kakao Agit group.