wzzirro / wazuh-yandex-cloud-rules

Yandex cloud Wazuh rules for CloudTrail events

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Wazuh Yandex Cloud rules

Wazuh rules for Yandex cloud Audit Trails. Be careful all rules are POC how for integration between Wazuh and Yandex Cloud . As well rules will not work without Pygoscelis integration and Kibana application. Pygoscelis image for Yandex Cloud will be announced soon

Disclaimer

THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

Rules for security events

yandex_audit_trails_rules.xml - Audit Trails events

yandex_certificate_manager_rules.xml - Certificate Manager events

yandex_clickhouse_rules.xml - Managed Service for ClickHouse events

yandex_cloud_logging_rules.xml - Cloud Logging events

yandex_common_rules.xml - Unauthorized events

yandex_compute_cloud_rules.xml - Compute Cloud events

yandex_iam_rules.xml - Certificate Manager events

yandex_kms_rules.xml - Identity and Access Management events

yandex_lockbox_rules.xml - Yandex Lockbox events

yandex_mongodb_rules.xml - Managed Service for MongoDB events

yandex_mysql_rules.xml - Managed Service for MySQL events

yandex_network_loadbalancer_rules.xml - Network Load Balancer events

yandex_object_storage.xml - Object Storage events

yandex_postgresql_rules.xml - Managed Service for PostgreSQL events

yandex_redis_rules.xml - Managed Service for Redis events

yandex_resource_manager_rules.xml - Resource Manager events

yandex_vpc_rules.xml - Virtual Private Cloud events

yandex_ybd_rules.xml - YDB events

License

The 3-Clause BSD License

Maintainer

pyToshka

About

Yandex cloud Wazuh rules for CloudTrail events

License:BSD 3-Clause "New" or "Revised" License