Elastic 25 June 2021 Detection Rule Development: Disable Windows Event and Security Logs How I took a issue created by another github user and added value to the original query and helped mold it into a new detection
Elastic 22 June 2021 Elastic Detection Rule Development: Suspicious Exchange Mailbox Right Delegation You first begin by looking up API or PowerShell cmdlets that will help assign permissions to a specific mailbox. So for this rule of detecting
