pypanther

View on PyPIReverse Dependencies (0)

0.1.1a53 pypanther-0.1.1a53-py3-none-any.whl

Wheel Details

Project: pypanther
Version: 0.1.1a53
Filename: pypanther-0.1.1a53-py3-none-any.whl
Download: [link]
Size: 998142
MD5: 67ab04c838effb88573e4135efdf7acc
SHA256: 75a35963a1c404a617f93f80956be9d7e70440c291ff2684853d5e15102538c7
Uploaded: 2025-01-09 08:49:14 +0000

dist-info

METADATA

Metadata-Version: 2.1
Name: pypanther
Version: 0.1.1a53
Author: Panther Labs Inc
Author-Email: pypi[at]runpanther.io
License: AGPL-3.0-only
Keywords: Security,CLI
Classifier: License :: OSI Approved :: GNU Affero General Public License v3
Classifier: Operating System :: OS Independent
Classifier: Programming Language :: Python :: 3
Classifier: Programming Language :: Python :: 3.11
Requires-Python: ==3.11.*
Requires-Dist: aiohttp (<=3.11.6,>=3.9.5)
Requires-Dist: ast-comments (<2.0.0,>=1.2.2)
Requires-Dist: boto3 (<2.0.0,>=1.34.99)
Requires-Dist: colorama (<0.5.0,>=0.4.6)
Requires-Dist: dynaconf (<4.0.0,>=3.2.5)
Requires-Dist: gitpython (<4.0.0,>=3.1.43)
Requires-Dist: gql (<4.0.0,>=3.5.0)
Requires-Dist: jsonpath-ng (<2.0.0,>=1.6.1)
Requires-Dist: panther-core (<1.0,>=0.11.2)
Requires-Dist: panther-detection-helpers (<0.5.0,>=0.4.0)
Requires-Dist: policyuniverse (<2.0.0.0,>=1.5.1.20231109)
Requires-Dist: prettytable (<4.0.0,>=3.10.0)
Requires-Dist: pydantic (<3.0.0,>=2.7.1)
Requires-Dist: ruamel-yaml (<0.19.0,>=0.18.6)
Requires-Dist: ruff (<0.5.0,>=0.4.4)
Requires-Dist: types-requests (<3.0.0.0,>=2.32.0.20241016)
Description-Content-Type: text/markdown
[Description omitted; length: 4235 characters]

WHEEL

Wheel-Version: 1.0
Generator: poetry-core 1.9.0
Root-Is-Purelib: true
Tag: py3-none-any

RECORD

Path Digest Size
pypanther/__init__.py sha256=ZRCNIZ0v0mpWYyjBi_tnS6FbmUa4FFBErYew5HiH3_g 661
pypanther/backend/__init__.py sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU 0
pypanther/backend/client.py sha256=hyRKeQa5D-3U6bQIUTizO5mi8z2KVCsrAIyCkdvduUk 4588
pypanther/backend/errors.py sha256=2gD1bwSEPya7v0Su1oDh9Rexl-fjpjl52UMxe9F7gFM 383
pypanther/backend/graphql/bulk_upload_detections.graphql sha256=BBTOoE1kmd7DoTX0yj1bByOnJMsMjTsLSxwnL1-tdOE 129
pypanther/backend/graphql/bulk_upload_detections_status.graphql sha256=oLVPfMttseA_bNEjD62y7i6ldh3tNR38wC-QV2YViNw 265
pypanther/backend/graphql/bulk_upload_presigned_url.graphql sha256=gZiLyuIONKOk4RD9Ihj8CIyuKtxu3XNtJ8wRu0_UAyc 159
pypanther/backend/graphql/create_or_update_schema.graphql sha256=HyFf-5hO-AjyLkryvKplt91lrL92iRB47tX7KXc6Q3o 314
pypanther/backend/graphql/list_schemas.graphql sha256=05EM35wx2UWNT_QRTxOujBu1FaoXY67nveLW3C_HQ0U 336
pypanther/backend/public_api_client.py sha256=Zf0gVdQX8FQHmHZnGmh9DABAApN_4MS094vm0R4Y0i4 11916
pypanther/backend/util.py sha256=oB_E_vm7MJR30pfJHxpJyJcoVLWOYDXg2zjul2D2QAA 2216
pypanther/base.py sha256=gc0ef-d0VtVaqAMCaavgz4Gy6dPjD7tirlBLsjDtPXk 27214
pypanther/cache.py sha256=PiulwoUA0WPFD2eGvnjRbuK7X7Y26ARsQQk0VyCjHB4 634
pypanther/cli_output.py sha256=uyDqO2Z0xd4g_TRUJlGJs7VgcRnYlpj1T-GT0hrcido 960
pypanther/command/standard_args.py sha256=SAxTxR71nLMjMQRlVf7zlNL4OE9Gl6REoFnCsc2leZA 493
pypanther/config.py sha256=k-O619NzX59iiLW_eFmNQk68sy8YwpAsmOhOJbyaLKw 1320
pypanther/constants.py sha256=MRbL3EjbIiR-XJ7QqBaMUb9zKOC3_fEtlBsqn-J-U1Y 714
pypanther/custom_logging.py sha256=BPbebTgY1EOC5YlfOEbVUEmIPbhxDj4Vflz59df_AVs 1131
pypanther/data_models/__init__.py sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU 0
pypanther/data_models/asana.py sha256=e39xrjLC_TJH55cPFs9THDEIn8aHpQxlFqyi6o0nF7U 1243
pypanther/data_models/atlassian.py sha256=VmikgPbPy2XnGHBL-1AX2V96B7JIdxZhAq2VKUIPf10 1391
pypanther/data_models/aws_alb.py sha256=CB6OT-S7jQSAge3ZI5fDPXlzbbZMPl7NWSEln90E0V0 495
pypanther/data_models/aws_cloudtrail.py sha256=DcYoV5A1K2KJ792L2BJsdXZ9BWL7l_RZf6Q_ecxBOxo 2017
pypanther/data_models/aws_eks.py sha256=sAySUx5-UnzF5WYswoKBlRLkqMOYqbDxLi8I9WLVtWs 1276
pypanther/data_models/aws_s3.py sha256=aGDsRW3cmiEeBIfsZ8eo8Bj8UguizFn-WkLR4KwQoqI 520
pypanther/data_models/aws_vpcdns.py sha256=LclYewa0V3L0y-hRXx4HIS6uQPGUOvIqF5gYr2ECP3s 482
pypanther/data_models/aws_vpcflow.py sha256=2VtyrjfAgXJXcUqiuypAA50kiGpyMR-vqM4l4qDdDxA 681
pypanther/data_models/azure_signin.py sha256=0LgJEKNsXwzKf1AFiF6fP2Aokf1pNKDiYHNPUL7viJI 1022
pypanther/data_models/box.py sha256=zSK-b_MAiueJUozotXLslSSoxm0ZCqV12NTVn0bZvmY 804
pypanther/data_models/cisco_umbrella.py sha256=YPyppSKDlFgMaQbxvuL7vHWCAOwkf1RtPgbLu-doWCU 762
pypanther/data_models/cloudflare_firewall.py sha256=-VhDgPmFaxOzQtCd4fzwe0AFShdB3GrQ5G_6I5z0uXQ 541
pypanther/data_models/cloudflare_httpreq.py sha256=vfm2AHYD_eUoiTUVdpTzgdTqGdTn9-uIimU2B8b10IY 611
pypanther/data_models/crowdstrike_fdr.py sha256=821O3HjgmPiOd-JMOc8H6aNchW9jwkvgISwuR2ml5dw 1691
pypanther/data_models/gcp.py sha256=qpU_gffye1jLGfmAVRZ491hieUI2yv29S-xh_8_zfzM 5061
pypanther/data_models/github.py sha256=9IJTVurIVPPGXotlBcuL7_cQPfXrFd60HsZTZOeXey8 1469
pypanther/data_models/gsuite.py sha256=l_8dy5PWY2tndmoAKIhJOkPW_9IB1mexy5TRFH6kCws 1431
pypanther/data_models/notion.py sha256=dynS_xnjx7ml5NipYnZFI-NUJJD_Ro0WVQxEx20MrpA 1712
pypanther/data_models/ocsf_dnsactivity.py sha256=S_yo5XwUo0cg1YOaBakSRz_r2nrVpq5MpIxW9Ht0T0Q 534
pypanther/data_models/ocsf_networkactivity.py sha256=O-cQTENj1GqHf8EIiBbHM1GQDJVii1ENVGhnLbFlQT0 700
pypanther/data_models/okta.py sha256=uPe1CfeTI7_vEz5a39kFXiP3G8MkBHomJVGOWBXzBiE 1863
pypanther/data_models/onelogin.py sha256=BrBGpaIiZxHAdbNZT72C-QIypOQhcgc1HlVOPIVcFFA 1302
pypanther/data_models/onepassword_itemusage.py sha256=LpeTZOYkKJ4Eh1LQmOYb_gCoTNiIigwU7W4xjIICY-c 626
pypanther/data_models/onepassword_signinattempt.py sha256=qvPi-iBtPqSljdt0mccjLip0RlzxUowatzdjiMH9XHA 922
pypanther/data_models/panther_audit.py sha256=DE2-hWSdHPXQF_83aWfny9kZwp2-oKKT7qPu47VxrpI 1575
pypanther/data_models/slack_accesslogs.py sha256=Zvbvk8mN10PLo3h_7PMLVD05GWbBXzTqkNocxsgJhwE 502
pypanther/data_models/slack_auditlogs.py sha256=8NyGnYLncMF7_no6e50pJTXKxKs70wAdbFzVfWRE-Hw 593
pypanther/data_models/slack_integrationlogs.py sha256=VYwSqbtth3TGKDKgnvk0DoMDKPZpfQKjUvSDornZyG4 389
pypanther/data_models/zendesk.py sha256=JKgLiRCOxnzvB47_mwcu1jSX7zvQjnuXxQwN5136rJE 2550
pypanther/data_models/zoom_activity.py sha256=lrmLw0250D2FZPSORik0RjkvRbVnNoy_D1KLeO7P4iI 749
pypanther/data_models/zoom_operation.py sha256=XPFv3UGSYX0WA41vt-nAA67_RtQJscFp9IlRT34oUfk 1757
pypanther/data_models_v2.py sha256=rBVsu0j6AuujgPcfQ7JpQPhIb7gTqiTDiHDO7DCbeNw 3784
pypanther/display.py sha256=rux_PNmRC9-NsBcN6kPRFfGjjLN-t2x2oYwsbtaPu64 6604
pypanther/generate.py sha256=4DTapKKy8dbfeyMF9E-iXcO9yulMQDhEFZO_4awSarU 51339
pypanther/get.py sha256=3_y-3wW-vHsKNduB5PgLPvvJnkN1UYDoQf2evCfk7HM 5268
pypanther/get_rule.py sha256=pZoFMxaSwmcZztoeQe-v-rxoG0UnVYNucABfuDJnUKo 1158
pypanther/helpers/__init__.py sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU 0
pypanther/helpers/asana.py sha256=cPNfAKaiULStu8009iIDt3x7YKnQjY3LGE382TvvMgg 1342
pypanther/helpers/audit.py sha256=Q_2iYHKQLLtJZ5cpfFFyW65qp900M3h1p2mx5rjW5MA 1615
pypanther/helpers/auth0.py sha256=rZM_-0Z7yAJsMAXfxSuD7SEBtPx165gQcYXYhUB_1jI 532
pypanther/helpers/aws.py sha256=nYuIJROCY_RNCygYvTK30EOYLteH5m0LvUACQ9nSDvQ 7517
pypanther/helpers/azuresignin.py sha256=mSKgVxc3oKOVQMTn-uyI_wZQ_mr6XgdRjDCRmnNAvww 1100
pypanther/helpers/base.py sha256=Unsx05bVqTRaa51JOFI2ysRDPFQikBc5Vpz0oNRAz_s 11398
pypanther/helpers/box.py sha256=vaFU1LQIBPE6Alyct_frUPKb9wGkCPwJERIVAwIkNk0 4947
pypanther/helpers/cloudflare.py sha256=GEITi30NDMwqkFBg6B6efjubLoRmwRV7gY8MgOIFu2Y 2276
pypanther/helpers/config.py sha256=wS9UFTrFS5wLHaPTbNeK5sYt19A_LFIhKN3DbZuqrck 491
pypanther/helpers/config_defaults.py sha256=taUuXL4jpWOoDaP0Q4mcjFF_Iefe1ZCnHNEkN741wEg 2868
pypanther/helpers/config_overrides.py sha256=uCk_MvVtORHjBW7gamfsfLElbmWJSLKJ6rhn9rb5824 1019
pypanther/helpers/crowdstrike_event_streams.py sha256=nD2YXFqVE_yB9xbOnriie9GRVxF7tv7gzfQt2ZTXi-s 835
pypanther/helpers/crowdstrike_fdr.py sha256=JvSfqE0Pew5zcyD8BKlajIsK9iqrj4DsMW5oxGNyJ5s 3187
pypanther/helpers/duo.py sha256=Lk3pKMHUiU1FScoh3FEN5fkU6gqGTRCvhrCyB39jaTg 1293
pypanther/helpers/event_type.py sha256=nV1noTFnzbw5EA0CBQrJRRE-ZrNuS3xOicxSOGOGP_k 1118
pypanther/helpers/gcp.py sha256=y7uAIGpXQAq-Sc8Y1ooDS8ZUqKgGRcQpeiDybhEHK-c 2682
pypanther/helpers/github.py sha256=oreq2FVYY8YMgqLOH2hhEyjmvcqsxnIXo-i97h2m-lM 400
pypanther/helpers/greynoise.py sha256=5BQaYNuEOlNV_xEHpnrF-zoPmfhFFRzpb1s7WxQf2-4 12266
pypanther/helpers/gsuite.py sha256=SKEieoKavOp0yIPAHYIBTTYc_XWynigLm0B64zS3UZA 1986
pypanther/helpers/iocs.py sha256=YRvBrutunc7Zn3kf6H4uF5qUWU5LzhWiZjVQN1qqY2E 35105
pypanther/helpers/ipinfo.py sha256=JhAU2f98yAJbbFZr8Wd69Wxw1xDZFlsO5RHqeeWaOlc 8144
pypanther/helpers/lookuptable.py sha256=D0gjJMX6AtpqA2PL3duaB2ZwAgoJVVlf0-XQgcR7qW0 2179
pypanther/helpers/mongodb.py sha256=P-yHZzNC4k9NJ6ptmMlyN9Tlun3ltvLSZGoTqvEQfPY 387
pypanther/helpers/msft.py sha256=CIRrn1ghThJXQQt0jVXyfDXbViIEKYYzS64jqRl88TA 819
pypanther/helpers/notion.py sha256=0tHku578ymwqPVt-K4YyhJl_ViGBU0fDhjZy021KyKA 277
pypanther/helpers/okta.py sha256=quvily8EwpcfW0kDxyt4148vAAfcCEf5yCEt13SBEpM 748
pypanther/helpers/slack.py sha256=qE-5zUTsN8racfu12miuQ_kddTPjMzS2XTYHPlb_Pr4 468
pypanther/helpers/snyk.py sha256=7giZvFjZKpYlFwQSsjLb8Gpm4HCSVQpHSBZoovfP72o 562
pypanther/helpers/sublime.py sha256=Qi7JcTUC5IL3kycAGbWcz8bu_XnKgwvBshsaMmt1tBQ 617
pypanther/helpers/tailscale.py sha256=W7TJlxaUbKivfwsigkepjdr05JK9r8sNxG-qCkN4jD0 428
pypanther/helpers/thinkstcanary.py sha256=_1aNkMRz9gXkM1BvyiECSbssvfG3srk49kyRZDOrLzQ 191
pypanther/helpers/tines.py sha256=IM4nv3f6lL7dhZdcmUYGEyhSm7VhdoEOYIdRb3BHz-o 567
pypanther/helpers/tor.py sha256=D5VhKsNAeDeAA7hZAIOaVlQ4eiiwqK3fDdezqBw3Smg 1526
pypanther/helpers/wiz.py sha256=nfNiqARsSPShY6DkGbRdVangobpZVEwA5UUjdxalj3o 507
pypanther/helpers/zendesk.py sha256=uP6bkI2nZP-ajibMHeSDlo_JtDql51adpPcJFXeeo6k 1446
pypanther/helpers/zoom.py sha256=7IKMOQqt4bOdBE2ZS6TsoLKooIiAKit81RAzHGExq-c 3082
pypanther/import_main.py sha256=Pj5caBftBhPWL-ZDAaUXnjARC8vMLH3MH9sbrvI4QLU 1050
pypanther/list_log_types.py sha256=Z2-1N2gSMg9pKHnqeKvd3QJpM-ACcihtdiYlyfkqga4 1130
pypanther/list_rules.py sha256=PZyF5GlKN36PDvYXC_Z_E1DTVfFHB8WRMuGheANpS_k 3403
pypanther/log_types.py sha256=LWC0qYO_zlttSB-HE4JH-ykzQAYPGmIMNKQQnuU85Gg 14500
pypanther/main.py sha256=G2odRFHNrkboH0IaIErjNYn0F6TZS1_1boD97EyM8I4 6497
pypanther/py.typed sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU 0
pypanther/registry.py sha256=EPbp4rxm0Yix8isXjbVdUM35pQ29TBaoTOnLTZv10HU 2742
pypanther/rules/__init__.py sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU 0
pypanther/rules/appomni/__init__.py sha256=PPv_X72kQCBmM81j7rIeRze4e5tobzxIwZQIKT6EE4Y 113
pypanther/rules/appomni/appomni_alert_passthrough.py sha256=G3HrLZ5b7OgK-2tRbF00Rg1myp3IEzG-T5hpPxeDyYo 10049
pypanther/rules/asana/__init__.py sha256=MmPIFVYhawaydqTXYAZoROreIqIWeo301-DBnx7NpCE 1612
pypanther/rules/asana/asana_service_account_created.py sha256=_rRMNfUpE4iYGB2D1HEZgBJPyM0JhOAQVc-gYQikg7Y 4093
pypanther/rules/asana/asana_team_privacy_public.py sha256=4tj8lnkl43YctuOwmT2_dbbFxVHD75oLHJHkGUiWz60 3269
pypanther/rules/asana/asana_workspace_default_session_duration_never.py sha256=dWB-iCj3xHq7QDnch5wE1yakK6LXGvV9DqNyB6Ddmzc 3106
pypanther/rules/asana/asana_workspace_email_domain_added.py sha256=EfT5vC4dvrMXGYbI2rkzRnOtpn6GTYRD4-vt2TOms04 3214
pypanther/rules/asana/asana_workspace_form_link_auth_requirement_disabled.py sha256=6NXMOCZceO6bwg25lC137IYh4f2DgywxdKT17uR7eac 3329
pypanther/rules/asana/asana_workspace_guest_invite_permissions_anyone.py sha256=3cCo8VVLlsi_ZBeU2BN3a2VwFtJT55RmxBxghk_GTGQ 3339
pypanther/rules/asana/asana_workspace_new_admin.py sha256=NHBm0jsfyrp_5F5-FGALkhKBBsqKxjF1HP0UJQO0aN8 3698
pypanther/rules/asana/asana_workspace_org_export.py sha256=lsLiArHb56SguypDTjcikeD0-Jg8IijhXxw-_VetDkA 3104
pypanther/rules/asana/asana_workspace_password_requirements_simple.py sha256=sJW2_kfkzwmUYoKcHkLiCfB-S7esRBPiAIIKzZDuGc8 3616
pypanther/rules/asana/asana_workspace_require_app_approvals_disabled.py sha256=wTefgbIdHxrCo2Hjs22cnolNpQ9m4pUA_5ykyHZysgI 3620
pypanther/rules/asana/asana_workspace_saml_optional.py sha256=V2fDMxH7rvzL-z_noRfa4BptjLHqDR0TN0P6ihmM7h8 3483
pypanther/rules/atlassian/__init__.py sha256=JL_67nQxsAfb0bHZTyMLtkfgDEWAmBnEz-Ym2Lsf1qA 120
pypanther/rules/atlassian/user_logged_in_as_user.py sha256=1FxAblDZAXk_bsxZS7Ah3MAT6vjV_sbb4Kv1lOlDljU 4734
pypanther/rules/auth0/__init__.py sha256=0jHDA1HM7-KNOvKiUCyW9mEkRMHPFNhGIBDtisTd3_Q 1325
pypanther/rules/auth0/auth0_cic_credential_stuffing.py sha256=v7vLcc-XjAXZG_LQZyjf_vnIclGkI1nfLLX-GpIP2Gg 15094
pypanther/rules/auth0/auth0_custom_role_created.py sha256=DAtJFtGw72kn3iyjB20T0Skbkuei-s5q8JA94ol4AWk 47856
pypanther/rules/auth0/auth0_integration_installed.py sha256=UACIZz3t7P-QGkhiHEA4oGgXOsoIqHJC4LI8NWJ3TYw 16111
pypanther/rules/auth0/auth0_mfa_factor_setting_enabled.py sha256=cbqlr4K2h8c2Z-nmcPQWtR-Dco8IQF97TdOzG2ajTjQ 24382
pypanther/rules/auth0/auth0_mfa_policy_disabled.py sha256=pYgVHn7P0jgzuNAxn2pyjFglHwaqZZ0R7sW-4wkWxLo 24730
pypanther/rules/auth0/auth0_mfa_policy_enabled.py sha256=EY5Tf_xF3TamBtocIzbCwhhnm2of3iVi372TjEopoUU 36208
pypanther/rules/auth0/auth0_mfa_risk_assessment_disabled.py sha256=-3lfxCgSEaxDLQVbIEMfhzXN6kkaD7T2aP-L68CfFUU 24828
pypanther/rules/auth0/auth0_mfa_risk_assessment_enabled.py sha256=UhiBvSVMnUmY6VB_l86m8L4Ut4nh937ejIx2-PzMGmg 23779
pypanther/rules/auth0/auth0_post_login_action_flow.py sha256=e66S408MQCKUuOFfj9AD6c9twVDuI2KfRATrHfIr-Wg 20133
pypanther/rules/auth0/auth0_user_invitation_created.py sha256=S6_BZlZDdLA-UBoLFxs3BVihL2-KbkgtO0R0p-Xd6Q8 18189
pypanther/rules/auth0/auth0_user_joined_tenant.py sha256=Yc5CuuyoesxzHOHiZ65mKGYsXc3Q5bGIb13Vj0e3tgE 19136
pypanther/rules/aws_cloudtrail/__init__.py sha256=R-UkYMLJnBg_fnzLXZrpo2CVCBBJrbPOGNXkSt5Ypxc 9181
pypanther/rules/aws_cloudtrail/aws_ami_modified_for_public_access.py sha256=S4611hoMxsFRTA_1lohLf0u9HRZsql_w6m8Bkw2nCo0 11209
pypanther/rules/aws_cloudtrail/aws_cloudtrail_account_discovery.py sha256=_shWqV68cGxpSMgNDQKKSZP9dNduKweGSPscIZYsDVQ 8505
pypanther/rules/aws_cloudtrail/aws_cloudtrail_created.py sha256=Hl5O3hZcU_iEU7UgcE_r0595EeW_nnuyKi6tXXR0mMM 7012
pypanther/rules/aws_cloudtrail/aws_cloudtrail_loginprofilecreatedormodified.py sha256=XcIxHZX7_gPDz6b8qldUCKtukuHcZ3SV7IGc4--vzM0 5534
pypanther/rules/aws_cloudtrail/aws_cloudtrail_password_policy_discovery.py sha256=QSEeTu393_eFZ9Le_6wHJwTAdqhX0YSvVBD0xQZ6RtU 3347
pypanther/rules/aws_cloudtrail/aws_cloudtrail_stopped.py sha256=87TaHAVsTFVJFseVIPyMdOBCcKCQQjMM-YDUBfZAMEg 7198
pypanther/rules/aws_cloudtrail/aws_cloudtrail_unsuccessful_mfa_attempt.py sha256=SiyQWVHSUQDi5D_Zn-iVHUJEi6Du2iN9Lp8tWl7PRsQ 4514
pypanther/rules/aws_cloudtrail/aws_cloudtrail_useraccesskeyauth.py sha256=-h8u5IK5dHOw1G85IuzYEWj9QzI0fqTscFMiNuBbt8k 15763
pypanther/rules/aws_cloudtrail/aws_codebuild_made_public.py sha256=gVF-NgN2hq-dU9J9BwP5umihLRYJE3Q6lwXFxgSguOk 6933
pypanther/rules/aws_cloudtrail/aws_config_service_created.py sha256=M4aPmDzcxbeFOev1G9xF4E4DpQzK7ybMSl7Nmj-V8OM 6488
pypanther/rules/aws_cloudtrail/aws_config_service_disabled_deleted.py sha256=DHx7wpo06HVdth2BarSRm3Je09aoJ5lvwlkguJZmBxo 6488
pypanther/rules/aws_cloudtrail/aws_console_login.py sha256=JoCzjKuXaTM72sAo6g1OdmPdhy_FS_zWh3VVdvSQf5M 669
pypanther/rules/aws_cloudtrail/aws_console_login_without_mfa.py sha256=Hm5UinB01A4RLT-JpF3q-beYeKSkHhMrUEv5-dPfBMU 21435
pypanther/rules/aws_cloudtrail/aws_console_login_without_saml.py sha256=pxc98i9yp7x09XIwcSvyttpss90laUxa2TMXC8y2_HE 4074
pypanther/rules/aws_cloudtrail/aws_console_root_login.py sha256=jRDr6V4CHUrD6b-MQq9Oe6y8dOfgZbDXonbs4vmCqhI 5493
pypanther/rules/aws_cloudtrail/aws_console_root_login_failed.py sha256=lXCp16iz8bB-vftp_fUYGEqLEsvR-xR_Xgvjt7lKOuE 5758
pypanther/rules/aws_cloudtrail/aws_console_signin.py sha256=86t1o4Yd8gVq1phKzeXaCpwiUZXFnlWcKhP112G_i5k 1049
pypanther/rules/aws_cloudtrail/aws_ec2_ebs_encryption_disabled.py sha256=K8iDwnJy_wZdz_BtWKtSWB7-7pOEiyHr-Tcnj2MKaUc 2227
pypanther/rules/aws_cloudtrail/aws_ec2_gateway_modified.py sha256=E87Dw498Y39fmy7jaSa6YbqahzcHHWGnPsVy_IsBewA 6652
pypanther/rules/aws_cloudtrail/aws_ec2_manual_security_group_changes.py sha256=sBNXR_BwFP5CBaZKl99T10qMsSe9R9hmsabQa4t0BOM 17423
pypanther/rules/aws_cloudtrail/aws_ec2_monitoring.py sha256=gWLJ2hhcmkrCJ0hfVZ0xD948gDdGWgUwmG2h3izhSLs 22527
pypanther/rules/aws_cloudtrail/aws_ec2_network_acl_modified.py sha256=sdIzGMRxsCwi5oC2za55jzjqy5c6Yxdyi3FQcq9M-uU 7232
pypanther/rules/aws_cloudtrail/aws_ec2_route_table_modified.py sha256=2G2LRp1cM9qN4qdLngH7j4-BE9DjK0V_Q2ZP_mb_5OI 6834
pypanther/rules/aws_cloudtrail/aws_ec2_security_group_modified.py sha256=WQlWu1dtAIHJDEQEhU_xOY7TlTOpKmuB-2GtkHHsgDQ 8091
pypanther/rules/aws_cloudtrail/aws_ec2_startup_script_change.py sha256=V17zXhMFsijey3UcUFrqAXW0l3TEvnItCOq1XknYAxU 5193
pypanther/rules/aws_cloudtrail/aws_ec2_stopinstances.py sha256=nKncAm7WcQJhdv2fU-bJlqYSLASG0IJrnehcUEMdT1Q 9624
pypanther/rules/aws_cloudtrail/aws_ec2_traffic_mirroring.py sha256=wvV6LcOdEW2bROp9Fxy8fFaikbrbxRAEfGxMRaUFscE 31027
pypanther/rules/aws_cloudtrail/aws_ec2_vpc_modified.py sha256=TTBokDzBC4fQyqtJ9RnehVTeXJ01020ZSgvmUwO33PU 8808
pypanther/rules/aws_cloudtrail/aws_ec2_vulnerable_xz_image_launched.py sha256=0Cm0CIgvHVsVBtxJteHXA0gCVHILnmd5nb3ehbe1sM0 39894
pypanther/rules/aws_cloudtrail/aws_ecr_crud.py sha256=B-RGM1VETQI_1P8fDpbkk7Bmq9vvX2aP45AJo8mCpF4 27353
pypanther/rules/aws_cloudtrail/aws_ecr_events.py sha256=crHz3eND61rMTLKwim0kEW1SQnvgoOSVjAwiwIpCWkA 26817
pypanther/rules/aws_cloudtrail/aws_iam_anything_changed.py sha256=F9-iBK7ENhZ1IbzUEi2ZsvslwH-TDog6g9vSM02oKks 7260
pypanther/rules/aws_cloudtrail/aws_iam_assume_role_blocklist_ignored.py sha256=YCNKem8l5ni6Pu18kWfYEUXipmcVRFiGz0N05WNzuO4 8756
pypanther/rules/aws_cloudtrail/aws_iam_compromised_key_quarantine.py sha256=oRNqN9vc5ip4yW16jagXv4mVJ3ON18w9NMUr5lcOpp0 6150
pypanther/rules/aws_cloudtrail/aws_iam_entity_created_without_cloudformation.py sha256=ioga_Q5AWYyML60mhMSA6zkTKU0zyQCO2XIGz1XTq6I 12767
pypanther/rules/aws_cloudtrail/aws_iam_group_read_only_events.py sha256=8YctIOHSZ3Zod9jr2rbTet6J1coFrR_3kqIvw5OVuf8 14160
pypanther/rules/aws_cloudtrail/aws_iam_policy_modified.py sha256=mObvbjAsQZ9u8yuWJj4a2mJ21ziqsoHN2S-4aPG-CIU 7152
pypanther/rules/aws_cloudtrail/aws_iam_user_key_created.py sha256=8ykqOgDfZ4M64bSFyraC7uEeRWUPm07b1DBHWuk2Ak8 10991
pypanther/rules/aws_cloudtrail/aws_iam_user_recon_denied.py sha256=iVCWowhDznHkAkm3pg7KviszZZoQ5UvJbnZI_b0qI3M 9005
pypanther/rules/aws_cloudtrail/aws_ipset_modified.py sha256=eyxZubvT7LWZmFyVAxQgFFGg4R2Hq5lRfemvYbMyf60 3459
pypanther/rules/aws_cloudtrail/aws_key_compromised.py sha256=OAE3T_vhZZtfxhZQdsbWX7G_S9wMgKhJDOeqlLXFIfM 5282
pypanther/rules/aws_cloudtrail/aws_kms_cmk_loss.py sha256=3fK2rxAZpy2Jg-QZI-pWXsR9QtwSEEzoKMad1M8at0c 11424
pypanther/rules/aws_cloudtrail/aws_lambda_crud.py sha256=vwshqio8-iwaVY6UBkJ0YRkteHbDao_8bZHRmR_JUOs 5832
pypanther/rules/aws_cloudtrail/aws_macie_evasion.py sha256=7GKWxcjdmYkhhcl2qwyNuFa6GLBzhZESwRNLKsWZSAE 10012
pypanther/rules/aws_cloudtrail/aws_modify_cloud_compute_infrastructure.py sha256=xHoZOHxgLMQQVVlVOo9Ifgaos6ywMdKpKVk4Me2-M8I 27514
pypanther/rules/aws_cloudtrail/aws_network_acl_permissive_entry.py sha256=dJ-sJQBpvz47Gx9En3QYBLck_EEMnGvRnC1A9ix_I14 7939
pypanther/rules/aws_cloudtrail/aws_rds_manual_snapshot_created.py sha256=jxdrRUu5GRox-uNLPW4yFubbzKogA7BmMuy6vgdB4vU 17093
pypanther/rules/aws_cloudtrail/aws_rds_master_pass_updated.py sha256=wZXKjSUrRNX_sQubUBCWl_fc0zUufeHweu7KsMIKHu8 15249
pypanther/rules/aws_cloudtrail/aws_rds_publicrestore.py sha256=ufd_3d4nvbwEMQEsIzSLzjSlb11C70Fz3wKsGragC8I 18473
pypanther/rules/aws_cloudtrail/aws_rds_snapshot_shared.py sha256=PNzdZKCfgj98I_5alfUllX36XL-aYPVAdOtH8wTDbTY 7477
pypanther/rules/aws_cloudtrail/aws_resource_made_public.py sha256=VVb1P57iBLvTliJClsuWZRR9g8zKUPyU1F-c4V4zkT0 19475
pypanther/rules/aws_cloudtrail/aws_root_access_key_created.py sha256=UqX_L7kT549tfzxgqufPrsvkMC7xXeJYsh4wB6eg9gE 4544
pypanther/rules/aws_cloudtrail/aws_root_activity.py sha256=lhXQ3sotobThhlnjy6pvkOybf0ZqciTtR3Sc3sm64WI 11101
pypanther/rules/aws_cloudtrail/aws_root_password_changed.py sha256=oel5npHR8uewO5lfGA2rJj8RBIG4BNDwPkt--PyCZFo 3953
pypanther/rules/aws_cloudtrail/aws_s3_bucket_deleted.py sha256=Skuyu6ZwCeUZajWdlpz5PQjSDxn1xV_SghnFKWbNS3c 5895
pypanther/rules/aws_cloudtrail/aws_s3_bucket_policy_modified.py sha256=kTVlXr9eNiywJEp-RqmujXvpAXhDp_L2siUINGCEVHM 7606
pypanther/rules/aws_cloudtrail/aws_saml_activity.py sha256=NJRUifaCpLK_wMWh3mSJPydye0dobdeVFb3qmrpdNKA 12706
pypanther/rules/aws_cloudtrail/aws_security_configuration_change.py sha256=uN308uSMkipXZjyQgy3uF6yuv_C5ScCHeIiwYb0GP0s 12076
pypanther/rules/aws_cloudtrail/aws_securityhub_finding_evasion.py sha256=BAX6knPBlhdli71TE6lAuiPbuTk7i8AwYBpwthRtcC4 5586
pypanther/rules/aws_cloudtrail/aws_snapshot_made_public.py sha256=J9qpzlaybTP_DvT2KekR1PF3nnvAdBUTcJyAk6d3E18 9946
pypanther/rules/aws_cloudtrail/aws_software_discovery.py sha256=fdyZX6eXUDfBonEgH_FGMovl7wS3xZLCa2AweAirIZA 5276
pypanther/rules/aws_cloudtrail/aws_unauthorized_api_call.py sha256=Qex93Cu3ifC5jGLQT41PFbfb0fHVYyVgAZGUMF-X6WI 6414
pypanther/rules/aws_cloudtrail/aws_unused_region.py sha256=s9SxDg7ecpbLDiwry8bG38x0Zu-2vfyFm9ORea4kmM8 8790
pypanther/rules/aws_cloudtrail/aws_update_credentials.py sha256=MsaVat8H2XDBFMKY8-DGWEwWPM_-neIeQ9c-RFGn3E4 5880
pypanther/rules/aws_cloudtrail/aws_user_login_profile_modified.py sha256=lY3CEQuJLxzvDwmpaWlscvc4N1VKcGLIduuk7F5K1U8 6851
pypanther/rules/aws_cloudtrail/aws_waf_disassociation.py sha256=XMD5nmT8LFIqnazM0A9CqamDTcMGfiDtbEXx5J3wd8Q 7148
pypanther/rules/aws_cloudtrail/retrieve_sso_access_token.py sha256=lyyYrsJzOFqqpaT-c0cWOXMAXmNTjPqTSyhzGe6bbyw 1936
pypanther/rules/aws_cloudtrail/role_assumed_by_aws_service.py sha256=4HnSrkZAqlOqx0BamMPrzgm7YHGzaz5XUATJburkb-s 2405
pypanther/rules/aws_cloudtrail/role_assumed_by_user.py sha256=yt0piO3NTXgmkOTC3UWyOQREZGWlNG1hPqVDReP6Roc 2386
pypanther/rules/aws_cloudtrail/signin_with_aws_cli_prompt.py sha256=Vz07VbA2YwjQZfLGxrOVvuUlIAE2uo40voJLizs6asc 1203
pypanther/rules/aws_eks/__init__.py sha256=NcmYBjwngi7l0cOXnVp0a1s8gRPxo0fJtZbln6NCGZY 273
pypanther/rules/aws_eks/source_ip_multiple_403.py sha256=UYxBb8tWlVeFdXP1ujaqBzYBfcsF3WA_ay722lzh7_I 9605
pypanther/rules/aws_eks/system_namespace_public_ip.py sha256=B8NR-edM0C-w0GuqOoixWFIiYO6R3I9i2UjwXZKbmP4 17831
pypanther/rules/aws_guardduty/__init__.py sha256=XFXRddxWIhxzIoUDdMJzkWHs07vtyEVju-ik0s7f4GI 450
pypanther/rules/aws_guardduty/aws_guardduty_high_sev_findings.py sha256=E8DX2PqYVhOBYjVxW5tTYGbbCvLeBJmx-Enwwiw_K18 5516
pypanther/rules/aws_guardduty/aws_guardduty_low_sev_findings.py sha256=0DkHnQdrpLQl2VgwPZMk-VUY80pFPSbkNqd2b3OnUMM 5541
pypanther/rules/aws_guardduty/aws_guardduty_med_sev_findings.py sha256=l8PGX3G9x2Rgm_pe_WF3KD42gwZMsvwoGlicKmw6Lr4 5561
pypanther/rules/aws_s3/__init__.py sha256=YKvUjP1TkNlUAeTf-OyJxJ6TyGv7jCutarj8QVUIvEc 643
pypanther/rules/aws_s3/aws_s3_access_error.py sha256=b5KOnzvGkHkI8qBeVWhUpAgtqTkKrc7FwZ2PNJ0qb2Y 4863
pypanther/rules/aws_s3/aws_s3_access_ip_allowlist.py sha256=-Bue3KI1uNy5W9RJo8RHID7DQb9YVKEnMzwemtw3KAA 2420
pypanther/rules/aws_s3/aws_s3_insecure_access.py sha256=h1USb5733Ez8xdX58VzMGJwi_t7610mkNG3cucREsGU 6375
pypanther/rules/aws_s3/aws_s3_unauthenticated_access.py sha256=0AqkjQlQ4O93DmAIu8EMvYmPPtJskzZ9eAm5dDYzZ6k 1817
pypanther/rules/aws_s3/aws_s3_unknown_requester_get_object.py sha256=ZkJnqCWyDhEYUS7mlLmUWpbohZFxXvM2Y0lvNjKmy9w 8850
pypanther/rules/aws_securityfinding/__init__.py sha256=kqNTGUz28BatiNtkNxTE-PyDxem3vPMehjww4naxOJM 609
pypanther/rules/aws_securityfinding/decoy_dynamodb_accessed.py sha256=9YmwpgwIBFIVWDwOzXqO6vAsiyuTrYZp20fkQ1HxYLw 13834
pypanther/rules/aws_securityfinding/decoy_iam_assumed.py sha256=Uu2tv1_awxxCh0G7hoJ_Rj5LYvgi5rrhjLNAfXefpKo 13575
pypanther/rules/aws_securityfinding/decoy_s3_accessed.py sha256=TZienzZhoQyB71XDMxeZHyOF9ry-db9BoWUiPWv8RS4 15105
pypanther/rules/aws_securityfinding/decoy_secret_accessed.py sha256=HXLio1uCLaFQ4Pgds3xEXijy4CZJchPp2ktcukM_vSc 14249
pypanther/rules/aws_securityfinding/decoy_systems_manager_parameter_accessed.py sha256=cCT6FMjkyvfQvjfsDiF3JPeAAIDDLE60dtE5b3Npijw 13444
pypanther/rules/aws_vpc_flow/__init__.py sha256=xfdOLW3MHePa1FU3ArFLObViUOMXGQQ45L4SXDLUnxQ 654
pypanther/rules/aws_vpc_flow/aws_dns_crypto_domain.py sha256=G2mQob-wtJpHe54DoeJf-zuoxLqS0-IPiY99ggV6hlQ 11090
pypanther/rules/aws_vpc_flow/aws_vpc_healthy_log_status.py sha256=b7uCMVJU_swa8-24e0rg8tUrNsRIht9fNimHt1Bg8Ig 1766
pypanther/rules/aws_vpc_flow/aws_vpc_inbound_traffic_port_allowlist.py sha256=KW0BVhXB_SXLrGijHWoegM1zuttKr1IFJmAgqeiicoY 3299
pypanther/rules/aws_vpc_flow/aws_vpc_inbound_traffic_port_blocklist.py sha256=JO05Y61GabX5xDZ6RIxS2bPSTsPG9lzoMrhv9DG_LAU 3248
pypanther/rules/aws_vpc_flow/aws_vpc_unapproved_outbound_dns.py sha256=3lvCmtupB4oR8PZ-NRAZqz4ZIbgbMzzDCxkQ0dZCZFQ 3696
pypanther/rules/azure_signin/__init__.py sha256=DvTTyPaoDY2qXafLECRnC2lQ359yb6sTjlF_ybKju08 367
pypanther/rules/azure_signin/azure_failed_signins.py sha256=F2yYktgfN8_H0-i4pNLK3u_ZHCEHZmV9GC9gl6L9Vqs 8009
pypanther/rules/azure_signin/azure_legacyauth.py sha256=xXpmyIo-kjDqaKMeSn1b686naExlw-_7L1IE_C9YDBc 16057
pypanther/rules/azure_signin/azure_risklevel_passthrough.py sha256=GwP71N56QrbU-unFNDfK3gyUttVlKg7m8218ZjsMuSU 17800
pypanther/rules/box/__init__.py sha256=C2C6M-nA78tkjNwMkO8W3C4VCls9vpniABqdwPN8Mas 1193
pypanther/rules/box/box_access_granted.py sha256=gPY7c2YJOaqYao6_ic_SDvJS0aN2fJI8vz44VjACD3g 1846
pypanther/rules/box/box_anomalous_download.py sha256=-pXiGFtkrLXPNKhQsrgMCzO-2MqwQ7KujMrFj3xlkVE 2675
pypanther/rules/box/box_event_triggered_externally.py sha256=c2AuNyJ-9bxudQaMErSfHJRTr3rTH2zf9KM13BvBQ4g 2512
pypanther/rules/box/box_item_shared_externally.py sha256=YxZXJH8KPeSsfuNfdB-9leNBaUTDCAa9XvvXp7HIjWo 3150
pypanther/rules/box/box_malicious_content.py sha256=nlQdKJB1L14t6X14WAC7Njkc-goduF6_ysbAbOsHEZc 4011
pypanther/rules/box/box_new_login.py sha256=Y17J1S2m1glDe1j245y37jAeqHAq2ls5m4DU_8RvDWE 1910
pypanther/rules/box/box_policy_violation.py sha256=b_e5KXioD6rAOTBZtqrUdV1hzP3lVo0CWAh3XecyPEQ 2471
pypanther/rules/box/box_suspicious_login_or_session.py sha256=zOGNFYNyDoDlREoKDH5V45qidPEwD3X7DfExeyaKW-c 3928
pypanther/rules/box/box_untrusted_device.py sha256=13HqfS5S0mcweKi1OlfmJaojNalxGcw7wEv37Krn7FY 2014
pypanther/rules/box/box_user_downloads.py sha256=zUOBK-Seocg1Fpay2-Br3M9cqVdcycRwhyU8KhqLK5k 1990
pypanther/rules/box/box_user_permission_updates.py sha256=Kr3HkhXBR38PHMKdS7AExlSwDQVDvdhGpG42YPgsKPg 2658
pypanther/rules/carbonblack/__init__.py sha256=NUBtOkd0DF6bVRQ2pLVHt05JVNNQQcGeNSeqN0gWaLg 823
pypanther/rules/carbonblack/cb_audit_admin_grant.py sha256=PJXBj_iCpwnEXQS767qj_inl4lpN7rJ_0oy0x_qSBeU 3340
pypanther/rules/carbonblack/cb_audit_api_key_created_retrieved.py sha256=voq7xb0ZcH2sXBFYcilYpegXr0njJpxrlD--3YWG3zo 2988
pypanther/rules/carbonblack/cb_audit_data_forwarder_stopped.py sha256=IDMwYeq_j3RCc7LbJWnuGmq2o_dEYnBzmS9jMdARrUI 3439
pypanther/rules/carbonblack/cb_audit_flagged.py sha256=rUB-mwHKuQj8MyQm-3KbUXz8iPsdQJWsriU0j95cXcI 3021
pypanther/rules/carbonblack/cb_audit_user_added_outside_org.py sha256=CBubz3Ig7twPRCcyWzF4ntiFW8ypZw3SNfbkC3H0-es 2533
pypanther/rules/carbonblack/cb_passthrough.py sha256=H5a8L320ol4gBucn5QlQm_V8xXCinzYsFTheufozJZM 11865
pypanther/rules/cisco_umbrella_dns/__init__.py sha256=xB-XFQPFd1JunsjXWMdCr_fvgVR2DD9NGTMrA2QZxNI 387
pypanther/rules/cisco_umbrella_dns/domain_blocked.py sha256=oaMZQwThIP_F6g3QLDkZKETW1Bk2TsgX5ZCx8bEkUgg 1770
pypanther/rules/cisco_umbrella_dns/fuzzy_matching_domains.py sha256=-Xv7tWqUWg2moMQ-GeGIU9Vr-7vnsxi9YbBVBZMmYJg 1378
pypanther/rules/cisco_umbrella_dns/suspicious_domains.py sha256=_3nQjvk24DnAe4El3Dj6tUCS2-_ms7f1_gkuUFJ0AGE 1878
pypanther/rules/cloudflare/__init__.py sha256=xlwispXZ5gXAfNPTv3kQrAfTQlVPE6qxEWNlQobKOrU 273
pypanther/rules/cloudflare/cloudflare_firewall_ddos.py sha256=i-GA-n2-jb8R0788GJyia9kJNvOIUXa_c7UR8m6C5Lg 5173
pypanther/rules/cloudflare/cloudflare_httpreq_bot_high_volume.py sha256=NXLHObSZMq9UHtE7ohTJwQJtxryYRcEtmwv5FMpruJk 7966
pypanther/rules/crowdstrike/__init__.py sha256=bKny1x5_-tIfw5zyEOG4o75VQaHzc1CtTBwo68DmnMo 2367
pypanther/rules/crowdstrike/crowdstrike_base64_encoded_args.py sha256=6--gyiJ0Wamb9dzPdep5G6_hdQd6GNP-NHvRZVSB7Ac 44552
pypanther/rules/crowdstrike/crowdstrike_connection_to_embargoed_country.py sha256=px00FatFKEcBsyP4bsVQWv_gYkdTrrZcd0vCJ6jj-yY 8494
pypanther/rules/crowdstrike/crowdstrike_credential_dumping_tool.py sha256=TTHDrzRqKd66k4eGFuu88-sbG5cNJlUxBPHsjxAS03Y 10066
pypanther/rules/crowdstrike/crowdstrike_cryptomining_tools.py sha256=u8e9JibVJao3qNV_PbISXpc5VnOLHtYNlW2hOfURJqA 10038
pypanther/rules/crowdstrike/crowdstrike_detection_passthrough.py sha256=hC0ErdSBFUMDE5Ny9oRqqlGF71MXvzN24jWmBYOpjBg 10752
pypanther/rules/crowdstrike/crowdstrike_dns_request.py sha256=p512SZg9DPYNLKLNJZ9m8NdvunCuC-7f9NxM0-3vZIo 12550
pypanther/rules/crowdstrike/crowdstrike_lolbas.py sha256=ppuEFD-4BjqH9_mSxOZ0L9c26VMBFgJgDJ2IdDpbKbw 11969
pypanther/rules/crowdstrike/crowdstrike_macos_add_trusted_cert.py sha256=g21Jy3y2EVGmFMQBLGhFPzYl9NZ84UOeEyMlHxOHG9M 19391
pypanther/rules/crowdstrike/crowdstrike_macos_osascript_administrator.py sha256=HNeGOcw7d8zoiYSjMJ3fYqSrfXE9RwHL2wws_NEUO7o 19568
pypanther/rules/crowdstrike/crowdstrike_macos_plutil_usage.py sha256=iXYwcFUiG_wuq-MTAeT0u8kaB7XjKePoKDRn_raXsKg 16030
pypanther/rules/crowdstrike/crowdstrike_real_time_response_session.py sha256=bSLQJnGKDoihEUyKrtVdLUpCRSJM43TuT1hoSudezcM 7189
pypanther/rules/crowdstrike/crowdstrike_remote_access_tool_execution.py sha256=LZ0CiXpeKMLYibIV7k0S4rN09j825SpOAOGOd0QpHFM 9885
pypanther/rules/crowdstrike/crowdstrike_reverse_shell_tool_executed.py sha256=cYiAqc1bGNzD3rIyN0BZyqInpgLS1KHZoVt0ft1mvGg 14136
pypanther/rules/crowdstrike/crowdstrike_systemlog_tampering.py sha256=JA2FhVOo74wLuAOL0f6EOL1SSQV793w2gxZ0OeQIOWk 9864
pypanther/rules/crowdstrike/crowdstrike_unusual_parent_child_processes.py sha256=0Kuv5AZMotc-ik0QENuBJVdjyaSk7Zjd3WAB-3S7bT0 10048
pypanther/rules/crowdstrike/crowdstrike_wmi_query_detection.py sha256=xg2mvP6iBGXetSn1y1F1Ne7f06WDpbJFd4WBt286pUQ 17928
pypanther/rules/crowdstrike/event_stream/__init__.py sha256=y93IURlhT2x0bAsVY2Ok-MZwIUemjgYuyB8sYBI-Yco 1346
pypanther/rules/crowdstrike/event_stream/crowdstrike_admin_role_assigned.py sha256=hJ4wYTtG9WpuqvUkFwu_8y_I00V-tJYpEAqtmwq-VW0 7607
pypanther/rules/crowdstrike/event_stream/crowdstrike_allowlist_removed.py sha256=Io1oBGbBAhdwW2QoFalabOKHK_JNH4HTHz-2XNMqeYI 7759
pypanther/rules/crowdstrike/event_stream/crowdstrike_api_key_created.py sha256=mmxW1VxXAWsFyusf3311k-9Q1jVtczcu0sCrD6xy-X0 2673
pypanther/rules/crowdstrike/event_stream/crowdstrike_api_key_deleted.py sha256=JLSmVfT2YzEDukXghY28xIsx86HAtKtqm8a8j-RSBJY 4309
pypanther/rules/crowdstrike/event_stream/crowdstrike_ip_allowlist_changed.py sha256=RCQRfUSgYhxF-6hr1MGDNb83cmTIfsH3JHmCO1CYglU 12503
pypanther/rules/crowdstrike/event_stream/crowdstrike_new_user_created.py sha256=e8CsWVKuWpk9r9yDzeQJdwrhafLgawg-hiF5YFJVg3U 3765
pypanther/rules/crowdstrike/event_stream/crowdstrike_password_change.py sha256=osAXJlkw4F8CSzv0Lgca_6Ty-fwIvbVym6TCWcK1i7o 7490
pypanther/rules/crowdstrike/event_stream/crowdstrike_single_ip_allowlisted.py sha256=GVbkgYtSw3wJ3oAgfBG8t6f_Rszd8446yimRdCks5Tc 10197
pypanther/rules/crowdstrike/event_stream/crowdstrike_user_deleted.py sha256=l4Q8ZoQ1NiZXK52AgmFm569PoUEPhjj8CjEX_q9ue9k 4324
pypanther/rules/dropbox/__init__.py sha256=lfrqN0God-FAjVLZ5GiryNv5F6TLp96kKKYbqVLqFJA 622
pypanther/rules/dropbox/dropbox_admin_sign_in_as_session.py sha256=TGuo2XmpwXxXNe_bACvnwoLDrjq1KjZTgN9WP0tYJNc 6700
pypanther/rules/dropbox/dropbox_external_share.py sha256=m7aWP_7X6DdN3VR8VmFnvNzZ0_hcuih_YrGwVY3RPLs 9507
pypanther/rules/dropbox/dropbox_linked_team_application_added.py sha256=43StD-4GLe1dX-srxAEa_75WllhH8HJpWlWUDJ5b0X0 8267
pypanther/rules/dropbox/dropbox_ownership_transfer.py sha256=hja6pGtDzspJ7Qb5OHqQDZMjTCOFkrolOqXeVvZB1Gg 11117
pypanther/rules/dropbox/dropbox_user_disabled_2fa.py sha256=SSbeookjFWSGcANDulD2FfAuVUf1NZ1d1PfWn63pMsA 5081
pypanther/rules/duo/__init__.py sha256=3p_9nxsFqDOX_eJ-o95r6oKqcsuBvbRIWhuSU5-Ce4k 1845
pypanther/rules/duo/duo_admin_app_integration_secret_key_viewed.py sha256=eGadfzA_zoXhlbfhyxAZUrdjABFTyjUIUxOs2SHBAgU 2025
pypanther/rules/duo/duo_admin_bypass_code_created.py sha256=oOIcNhygeX9ae5aZJwbKHK2ZiaOkPQAO2G4fIwpDOto 2148
pypanther/rules/duo/duo_admin_bypass_code_viewed.py sha256=pXePC1ODoqDxwBIRFA-C_slFkqaHSJHxC7oH48TtEd4 2219
pypanther/rules/duo/duo_admin_create_admin.py sha256=jj_e6x4JAPsk-Knmfqvq6fgtdfWRPXniiaOmYYDKY2E 2187
pypanther/rules/duo/duo_admin_lockout.py sha256=cAVfK24-P8iT2QKIUCq_Qxy2sniVaP0-8TgpScPVsy4 2532
pypanther/rules/duo/duo_admin_marked_push_fraudulent.py sha256=OFoqS1A_Nhj0pRftDlElli-D4APYy7ZD6aX3eFAQ-IE 2539
pypanther/rules/duo/duo_admin_mfa_restrictions_updated.py sha256=UrWongFMFTR6uivUFrefj5tQwjqv4Ws3J8MHXbL7bSE 1859
pypanther/rules/duo/duo_admin_new_admin_api_app_integration.py sha256=tYQ7_c5JQogT3BUYzG0pdS9BAtY2QNi8XnuIUmIYB64 3102
pypanther/rules/duo/duo_admin_policy_updated.py sha256=THTlkpYu7ogGNYHB77N-xsXinWnJwXrgOBwuJBxBcm8 2163
pypanther/rules/duo/duo_admin_sso_saml_requirement_disabled.py sha256=SA5642CKhV7klud2ULOaNQQ-UNsJDf7l2pPhV8NcznE 3346
pypanther/rules/duo/duo_admin_user_mfa_bypass_enabled.py sha256=JWvFmNthWr4sRhTfSepAh2Jj5saPa8PT0TfQAz3XV38 2914
pypanther/rules/duo/duo_user_action_fraudulent.py sha256=U4AAsYDShXEEBrbah3-9xc-AZbtOSDab0-NbdJzJAEI 1910
pypanther/rules/duo/duo_user_anomalous_push.py sha256=iR7ziWZGEPqSSC-sAjF1hmuBg9ToB5NA73OXcV3sfrI 3125
pypanther/rules/duo/duo_user_bypass_code_used.py sha256=r8c7fMJuqY5x0_WnRG3yIcZfDz8Z8accLwksDiAEwyo 3041
pypanther/rules/duo/duo_user_endpoint_failure_multi.py sha256=xDpXEaqjuT22e6w7XXidIh6qqlhOjAJxoVQNm0FROlY 5617
pypanther/rules/gcp_audit/__init__.py sha256=pd88xXLV2UD64nVtQCT39_x98GqZsxS3E1nJMN-u5Wo 5852
pypanther/rules/gcp_audit/gcp_access_attempts_violating_vpc_service_controls.py sha256=eIBEAe3kQ0-DT2TkLjXu1doceBJ4gakUjErieqZ31yA 9987
pypanther/rules/gcp_audit/gcp_bigquery_large_scan.py sha256=EI7pVGZL16-p_WLzM6kGZkebeIyN0DMjoZSy4Tj7E9A 12252
pypanther/rules/gcp_audit/gcp_cloud_run_service_created.py sha256=uIx5S3rCF9DxNLXRSHlMMHWuFFqcmb3XSHVvTQVjTao 11634
pypanther/rules/gcp_audit/gcp_cloud_run_set_iam_policy.py sha256=Edk2meodSgC8yOyodQkOdOGDZZOTJwkGC4vjSXbR5RQ 9313
pypanther/rules/gcp_audit/gcp_cloud_storage_buckets_modified_or_deleted.py sha256=R9enjnM2XxFdJFpqfhfvh6Xmud-iYC7PRgnwfuayCyk 6988
pypanther/rules/gcp_audit/gcp_cloudbuild_potential_privilege_escalation.py sha256=YBG6-U7wnsVfsMCTDoysln2FzvRCUVKZiLetlo6eBzE 7924
pypanther/rules/gcp_audit/gcp_cloudfunctions_functions_create.py sha256=qO25lh8mSLUhHZnKqD3oFNy50ZV9gidC8szJkqcnCow 3816
pypanther/rules/gcp_audit/gcp_cloudfunctions_functions_update.py sha256=csp6kuNgx2vz1zVKLeUJpnTSXob4nAZ-2hIsvLZQj0g 3816
pypanther/rules/gcp_audit/gcp_computeinstances_create_privilege_escalation.py sha256=E4CzFPpWnhJvtn-9baFhfV9RB9nrOvFa-Rw-6Y8iWcU 20001
pypanther/rules/gcp_audit/gcp_destructive_queries.py sha256=EXFGP2pizsn3v4rf1nmdO_JjKNJDZMDMCuy-1JYwHtU 10324
pypanther/rules/gcp_audit/gcp_dns_zone_modified_or_deleted.py sha256=mxAuVChf38OEyQ5TVmMtw-fTMGaTPu1o7eR6G62Z2q0 15545
pypanther/rules/gcp_audit/gcp_firewall_rule_created.py sha256=-iNVJ9LaipR1nc54gasyd9W7qKvo7T-T-Qz-9Vi0v6o 9204
pypanther/rules/gcp_audit/gcp_firewall_rule_deleted.py sha256=iA7XMmseByum4akVP_CWNcnnMyjgENR2fyFJ7EuWEKk 6697
pypanther/rules/gcp_audit/gcp_firewall_rule_modified.py sha256=RvefqZ5fNm9di9KRjvyYFJEjiXbWCh6AN0V-46XK9LI 8993
pypanther/rules/gcp_audit/gcp_gcs_iam_changes.py sha256=WDEq8U1pHa-bIC7zMkAgI7GfTYjBUFhJ7MoAuLUVrAo 3754
pypanther/rules/gcp_audit/gcp_gcs_public.py sha256=MIDaxgotEBYFdxOj-UrXSuCaWcBMR7De0c6IoHdxOpI 4425
pypanther/rules/gcp_audit/gcp_iam_corp_email.py sha256=4oBrXA_ylAJ7n3RNTa_bAOtPiYXt8DXR0uIFTcbbF_0 16107
pypanther/rules/gcp_audit/gcp_iam_custom_role_changes.py sha256=KHxyfP8r2DOqq0FXDdrF9QY5X-HfZBxEXOjctEJRzl4 5434
pypanther/rules/gcp_audit/gcp_iam_org_folder_changes.py sha256=aU3HGb5SBc0g7ucHiVRODtXoLk8fA9wB45v2YD2CZX4 10245
pypanther/rules/gcp_audit/gcp_iam_roles_update_privilege_escalation.py sha256=VVjdJvkMjYBY2WJ5J9MSRWS7Fi9EX2nLWDhjFZExPX8 3380
pypanther/rules/gcp_audit/gcp_iam_service_account_key_create.py sha256=9A93G_1cxYOxtf4Nm9ge3brIfvdufcz8xG-elapCM00 3808
pypanther/rules/gcp_audit/gcp_iam_service_accounts_get_access_token_privilege_escalation.py sha256=fJxMuCg5LGE8VnLHheXvcQuGvnZo_e67RMvw5dz1Fog 9292
pypanther/rules/gcp_audit/gcp_iam_service_accounts_sign_blob.py sha256=QpldJ2yHawwHOCZ88Nnc1TLIVRmd0cWpRaC2sYpfyjI 6372
pypanther/rules/gcp_audit/gcp_iam_serviceaccounts_signjwt.py sha256=yRDA5XVPJCBdUPJ5mCxNgR9a1oAmi0Ij1vfZ6o-p0WY 7023
pypanther/rules/gcp_audit/gcp_inbound_sso_profile_created_or_updated.py sha256=m7LtDZzvmkseg7vINIbbGfB8m_n2JuNDVhjy8lOoEVI 9416
pypanther/rules/gcp_audit/gcp_log_bucket_or_sink_deleted.py sha256=Dc046Lwu6OWSpqOngB3o1QQN2qMJ4DIHnSPbcHHKZFU 11576
pypanther/rules/gcp_audit/gcp_logging_settings_modified.py sha256=P8Csj2e1DQdUbMuSYI9JQIaAINFJU1BbvCIMkfPin28 7690
pypanther/rules/gcp_audit/gcp_logging_sink_modified.py sha256=xYhmQmG6SW08SgCSbZpa2REthXz2pTj3rEsbJ7CB1S8 7104
pypanther/rules/gcp_audit/gcp_permissions_granted_to_create_or_manage_service_account_key.py sha256=3z-ZCRBecAntU2EVS5B0X9OVBkRqmoUSycGPaGEAZo8 10522
pypanther/rules/gcp_audit/gcp_privilege_escalation_by_deployments_create.py sha256=BZ78JpqYZUDv3ND8YjnSahQU3m0OMAqgr0He_NUt-iE 3751
pypanther/rules/gcp_audit/gcp_service_account_access_denied.py sha256=XgUzY1rOh1D3OIC74A8YJPw3CCcgQiSRlw8uWH8gOAk 7926
pypanther/rules/gcp_audit/gcp_service_account_or_keys_created.py sha256=tfVqPb1oYFYBc2X9S-NylaF4MLLK1g2jc-pIEacg5I8 12035
pypanther/rules/gcp_audit/gcp_serviceusage_apikeys_create_privilege_escalation.py sha256=n0yQL6jzUy0UBJuc8XwLXw06-_NQ--E8NgoIll2twIE 11071
pypanther/rules/gcp_audit/gcp_sql_config_changes.py sha256=O0sRX939B6GVot1EVQ2q9dR1nhIP8QcHMdkyniC-0KM 2209
pypanther/rules/gcp_audit/gcp_storage_hmac_keys_create.py sha256=aCNzq5kJXtyZMYlMbTPcuxslnwMS0OJsGbbhrKHHcrQ 2895
pypanther/rules/gcp_audit/gcp_unused_regions.py sha256=g6Ew84K2FMxK-JTiT6ELiTLbACWZG9ylr_xxNcJaFbE 13644
pypanther/rules/gcp_audit/gcp_user_added_to_iap_protected_service.py sha256=B77XWi0ZmPvVELVfKaZrAR7c7GJ4ELltROeRdRmlq10 11141
pypanther/rules/gcp_audit/gcp_user_added_to_privileged_group.py sha256=ob2tzaTbYmnaCkNvdeFPm5zPm_wCEOMSJVWkHutx930 7107
pypanther/rules/gcp_audit/gcp_vpc_flow_logs_disabled.py sha256=3NxoqvNZ7MiJikScW9Fnt1jF3bKdbRXQkC0MRc-aL38 10012
pypanther/rules/gcp_audit/gcp_workforce_pool_created_or_updated.py sha256=J-CW2uH7te9ZHyhox9aeipQsaYu9NPYCMMq4mOsYQqo 10674
pypanther/rules/gcp_audit/gcp_workload_identity_pool_created_or_updated.py sha256=OaMicGV9OvfR3HgLa_W2Itz_-KJwz5eDg4pMQudqG_M 12270
pypanther/rules/gcp_http_lb/__init__.py sha256=TevaGnLcL3RFv4i3Wet4kmZ787joi5hqAsRxY0ODjUU 190
pypanther/rules/gcp_http_lb/gcp_access_attempts_violating_iap_access_controls.py sha256=K4xGF95z_GWXkQOUObuX3Vjn6TPnks7foSjp7HZ--dk 6021
pypanther/rules/gcp_k8s/__init__.py sha256=_wc40jI7sHi4ulSbhDwTm48F5grvOmKOKm_0VdOFjnA 1272
pypanther/rules/gcp_k8s/gcp_k8s_cron_job_created_or_modified.py sha256=4IFfj785ZyDdUm65sTFjFvVkTy6wow72i2mV7VXi1q8 4309
pypanther/rules/gcp_k8s/gcp_k8s_exec_into_pod.py sha256=LXCH5tPoGkX5tYEyOMEF6jfMQOVEMMK1CXsRAWVmUAQ 7820
pypanther/rules/gcp_k8s/gcp_k8s_ioc_activity.py sha256=5RaaKsm71A8sOGKXadO1dKm1iHKMc_LlMM0RT-uChmY 2088
pypanther/rules/gcp_k8s/gcp_k8s_new_daemonset_deployed.py sha256=6RV4ctsACL8TbmbuH_BjyuD7OelI4J-iPLrom6mD1mI 3247
pypanther/rules/gcp_k8s/gcp_k8s_pod_attached_to_node_host_network.py sha256=2Z146WSAPByGgFIwu7XeaTurYV0ADfxsq3lnGUHyNlE 3246
pypanther/rules/gcp_k8s/gcp_k8s_pod_create_or_modify_host_path_vol_mount.py sha256=JTYx-oBo86IV4VVwK5BRaueIAprlpy1KTe_pxiiTadc 12863
pypanther/rules/gcp_k8s/gcp_k8s_pod_using_host_pid_namespace.py sha256=vPse2rwvXitxAEvY4LY0yVYMezQsgo-JrUMxz1QhtUw 3161
pypanther/rules/gcp_k8s/gcp_k8s_privileged_pod_created.py sha256=sFqNiobX1mUP5od2Tlp0wxddnyRSRfbnqdl3xBJL4-A 15514
pypanther/rules/gcp_k8s/gcp_k8s_service_type_node_port_deployed.py sha256=zH81_WOfpz3KUf9ODN38lSVCSRGy0PFqX7w46yCcnDs 11278
pypanther/rules/github/__init__.py sha256=Y4mmvtZ11_SPqtDECBbPtUtHqwpVPykcsz6ituzjNMU 2567
pypanther/rules/github/github_action_failed.py sha256=irA4hqQ2Uh1setz5Er8dji6ccjwCGPHyM-YugP432vA 5303
pypanther/rules/github/github_advanced_security_change.py sha256=1omhTHX6kybsZeP_RI6eJLhSQTO9PFmqFNdvylNQR_E 14586
pypanther/rules/github/github_branch_policy_override.py sha256=cEwYUENQpFqPCEcNeX-0t6IcNE3cnJwNKuKjs76WpPk 1999
pypanther/rules/github/github_branch_protection_disabled.py sha256=ECJ4KuG8NwJAGqsbxsJUlGKrOme38hiiI5YXCAYgMBc 1993
pypanther/rules/github/github_org_auth_modified.py sha256=2jh4q2Z6SfzruZkMZUKo-Wb0mAvv5bVawha39HkJtvs 2225
pypanther/rules/github/github_org_ip_allowlist.py sha256=nKgVHKflXm6yNBcDbMsz_1lL3p8UG9WmME2UZC8GAfs 2403
pypanther/rules/github/github_org_moderators_add.py sha256=4W_laYN1N-bUowY9Y_32EMrtHvVuW7ZMH_E93N2lQQM 2185
pypanther/rules/github/github_org_modified.py sha256=Kz4gNTt57rmOEIhRFznyiYn9uLw50Ln9uR-EH0u6seM 2331
pypanther/rules/github/github_organization_app_integration_installed.py sha256=MBRzApL8ozpdf77wHWAxW-N6wuM6vdky0jrx-ixOsJI 3387
pypanther/rules/github/github_public_repository_created.py sha256=FjxK4_tsrD0lk2PCIqp53vMXZAtjngI7Pd-2Z9sfoHg 2809
pypanther/rules/github/github_repo_collaborator_change.py sha256=2Q5lMEnxqrhAco4u3VYH7bdmng9jkRE00q_UsrgkCZ8 2785
pypanther/rules/github/github_repo_created.py sha256=wjju7H3AMy94BUL-y-i3gxDdFiGaVBS6hRft9slcXgI 1431
pypanther/rules/github/github_repo_initial_access.py sha256=SvxlfdJPPvXgen_y-Fgc71s3LWYAdai4JPk4_mXq3EM 4390
pypanther/rules/github/github_repo_visibility_change.py sha256=wqZo8BPcxSvwR-UwNiVaBiI33gezdbt6Thj8cJNUvus 1831
pypanther/rules/github/github_repo_vulnerability_dismissed.py sha256=bEOREFlQH8aY-JBQFhAih0LoJf7jOU-kBexNN0MKxVo 2795
pypanther/rules/github/github_repository_transfer.py sha256=sFcIpCMol3zQjXEb-N9wi-ZkweBhD_SufS46u7BAwAk 5379
pypanther/rules/github/github_secret_scanning_alert_created.py sha256=Y-T_K0yAMVGKY3fNo1NlenrVkMeIRfmgqSNCWb1aqHI 3329
pypanther/rules/github/github_team_modified.py sha256=OUCcj-z4zUfHcUQrqc_z4SUTB0xb9hLXUVgN_GDg-jM 3361
pypanther/rules/github/github_user_access_key_created.py sha256=BLRTB8rco5MZAzKTfGIr6TQOPGrzf_4O4ikatIFI_vg 1575
pypanther/rules/github/github_user_role_updated.py sha256=lE91B8AvkHApE3S6rf1HqDz6FRPrCZbK2o2nqZ7wqxE 1682
pypanther/rules/github/github_webhook_modified.py sha256=-k7h0ZAI7Xnl7W3ua_PsyZxJvXRAVVkD2xzasL0Qg9k 4105
pypanther/rules/gitlab/__init__.py sha256=JyFGim6m10dynMRRvWmopEOGF7nDlUOa0xWRjpK609Y 353
pypanther/rules/gitlab/gitlab_audit_password_reset_multiple_emails.py sha256=vwgVcct5SI0k3akLGyEqxU5JX8jivQFU4Dqsr6XmTa4 2143
pypanther/rules/gitlab/gitlab_production_password_reset_multiple_emails.py sha256=K7pjLOcpnRw1FTadyUkKL_thtt1Y2EJoCZL6fZZv3DI 2723
pypanther/rules/gravitational_teleport/__init__.py sha256=FsprUZ_6_W1osvrt_z99O4sNphpfVrTYDJRAcInpAYU 1794
pypanther/rules/gravitational_teleport/teleport_auth_errors.py sha256=fyMBa9vqW8x8cHLZS8raM9JeIFegGF-GthPM9BFU-Mc 2485
pypanther/rules/gravitational_teleport/teleport_company_domain_login_without_saml.py sha256=V-NaXpjSsDw4zgUbgu2pSCF9mnyfQs1yknS4M7jIzAQ 2586
pypanther/rules/gravitational_teleport/teleport_create_user_accounts.py sha256=XBSVXiAu63aZC1INo5A1aiiTUUkrO4QZLNBDdDIlly0 3237
pypanther/rules/gravitational_teleport/teleport_local_user_login_without_mfa.py sha256=dazO3OatOvdICHrz2bztghhTmimjZI2G-qnPngmZtKQ 2966
pypanther/rules/gravitational_teleport/teleport_lock_created.py sha256=MDA50uzEQ3ZCoyd4kgVLrJpaokYTxAr3ok2eyIALrns 1719
pypanther/rules/gravitational_teleport/teleport_long_lived_certs.py sha256=Q0MjTwQs76rhrVsNBtkD5vHNJEE-xGOusns-6B_cuD0 6331
pypanther/rules/gravitational_teleport/teleport_network_scanning.py sha256=JCnos7EkMiLrOmtF2So95aQuiYwxlwM5jqHUZBfeJRA 4896
pypanther/rules/gravitational_teleport/teleport_role_created.py sha256=LtHj71wKy4I6smM-Xwuf-FgNgEEGbaXx1TJwksPLHLg 1555
pypanther/rules/gravitational_teleport/teleport_root_login.py sha256=UwHOLOhHBeQaTfxFGjxSKv66AyC0x7BHHG_onmrgphs 2192
pypanther/rules/gravitational_teleport/teleport_saml_created.py sha256=cOKZFqJOXuAFVFmcCVTZhMOftjBCvAbCnPXy5jwjbPU 1572
pypanther/rules/gravitational_teleport/teleport_saml_login_not_company_domain.py sha256=nPPboHLjaDr3JwM9ZgkFJWudjLvOsfNu-ianKploEA8 2709
pypanther/rules/gravitational_teleport/teleport_scheduled_jobs.py sha256=ne4xnEL7crxzd61MTLM33GRQocwJb3xfxmxCKXj9G9M 4599
pypanther/rules/gravitational_teleport/teleport_suspicious_commands.py sha256=a1sjOwetquLg4z6JMgS6xfj4oRvW74zAlKIYlYB3Tzk 3191
pypanther/rules/gsuite_activityevent/__init__.py sha256=tsn-BCY_y3Hzqk14NcrVjgl3fJ6CxTozvJCGVnDuKrc 4562
pypanther/rules/gsuite_activityevent/google_workspace_admin_custom_role.py sha256=-FfNlTagl-x_totJTf0lnsb9Hz4Nmg38SdQiOVm2Jjo 4459
pypanther/rules/gsuite_activityevent/google_workspace_advanced_protection_program.py sha256=Ij622K6vGJiZdtC9DpD4udBgYtsF5M2YSGhjaGMiyA4 6569
pypanther/rules/gsuite_activityevent/google_workspace_apps_marketplace_allowlist.py sha256=EQ9_YL8s8HHPviIcZDLgEWV_Xv2jBGeC57v9iG9DkfM 6861
pypanther/rules/gsuite_activityevent/google_workspace_apps_marketplace_new_domain_application.py sha256=kqdcYKE-RpQ1v145Yzg-iyaGP0bySoks8QwR36B9p1c 5473
pypanther/rules/gsuite_activityevent/google_workspace_apps_new_mobile_app_installed.py sha256=4FmFix2yJr6MghQtPPEoExfsE8Xn6qmL2I1YgCC1vh8 4779
pypanther/rules/gsuite_activityevent/gsuite_advanced_protection.py sha256=r5oRSMcyPfhP0Tzrtifiy31t_pPcJFLX0oDEhD0Agjo 1872
pypanther/rules/gsuite_activityevent/gsuite_calendar_made_public.py sha256=HbICVHi_Qg9JmbXODToDNiBeg-FGQ0ysjQJ_gHq_akU 5990
pypanther/rules/gsuite_activityevent/gsuite_doc_ownership_transfer.py sha256=3uulwx4-w5jOw4ko0czSpIGLZKObM_IwXl9Z5rQXnVg 2158
pypanther/rules/gsuite_activityevent/gsuite_external_forwarding.py sha256=GfGem59gqiD7i5TidbfT08STQZ4M01ygrDzKzUYqg2Q 4909
pypanther/rules/gsuite_activityevent/gsuite_google_access.py sha256=Czrc7fioX9OteXqZ4CgjuqM9FfCVjO34W-Fz8sZ2keY 1341
pypanther/rules/gsuite_activityevent/gsuite_gov_attack.py sha256=a6muSJZ0xWwnqLEJpeLtnRPrum9ltSrhJiskwujLlQI 1867
pypanther/rules/gsuite_activityevent/gsuite_group_banned_user.py sha256=TnLLXp4n629SAbsLLLz7YXG1gC7ramtkLpxcFl2dKLU 1838
pypanther/rules/gsuite_activityevent/gsuite_leaked_password.py sha256=sHuXFN3T4ojrz7ECeE-qhg1U3lKS_PXmrZLXbzZiP50 2962
pypanther/rules/gsuite_activityevent/gsuite_login_type.py sha256=Sfl8SoXHOVeZabbVQsd60mW3pJOKUbgHEWqkPyXYnhY 3473
pypanther/rules/gsuite_activityevent/gsuite_mobile_device_compromise.py sha256=TM_PMHvS_UorKvSimLkbm0uM2KMq8wn5SBUsO6iuiPU 2584
pypanther/rules/gsuite_activityevent/gsuite_mobile_device_screen_unlock_fail.py sha256=yE_yXpl8cJsOP__3C2eHsW5K7AMkpIPEAaAh40EBHOI 3306
pypanther/rules/gsuite_activityevent/gsuite_mobile_device_suspicious_activity.py sha256=iSr-kpjyrieocNDY6tf3i-10XQk5LSJUDDuaXQySDOA 1901
pypanther/rules/gsuite_activityevent/gsuite_passthrough_rule.py sha256=uzsull_fvy3G9XSVE_9QZJbQ6ZpP2orbL_MCupmydYg 3373
pypanther/rules/gsuite_activityevent/gsuite_suspicious_logins.py sha256=2Zz2llxj6_W2II7mwMKDyGwiPoI2_o_icHitTBQ5AlM 2493
pypanther/rules/gsuite_activityevent/gsuite_two_step_verification.py sha256=-TGG1B7XSCpakrXRhsoJuNlZ2HYMgG1MSGN4eabnWXc 2126
pypanther/rules/gsuite_activityevent/gsuite_user_suspended.py sha256=PTTBbLliO6ILg52wFnJ6i70YeQSZff8xPnfQwl_0xHc 2648
pypanther/rules/gsuite_activityevent/gsuite_workspace_calendar_external_sharing.py sha256=ZsngUvVq_6476puq-JP59mtmjM9IFjsqWoc1DCNff4A 7038
pypanther/rules/gsuite_activityevent/gsuite_workspace_data_export_created.py sha256=44_mO4I1YSNdhDIK1gdxPdqZOnxHKZGWSOiCeS11hF4 5023
pypanther/rules/gsuite_activityevent/gsuite_workspace_gmail_default_routing_rule.py sha256=sl1kEcMqU7iWW0rYqypG8T5QkcB-n987ITgY7BrTfdU 5928
pypanther/rules/gsuite_activityevent/gsuite_workspace_gmail_enhanced_predelivery_scanning.py sha256=5ZPiskyQSZJ5tW87ECHETxplnT2DNScOcwyJ6LX3a-E 5518
pypanther/rules/gsuite_activityevent/gsuite_workspace_gmail_security_sandbox_disabled.py sha256=1PEggScnl4p6wHhc2Qe6x3C2Pk5R7El8T6OYWpBB7sA 5296
pypanther/rules/gsuite_activityevent/gsuite_workspace_password_enforce_strong_disabled.py sha256=t_sKF3f1rMzRU18iOfyZ--f0ZSruGRgiMv8ZWvt-yHQ 5187
pypanther/rules/gsuite_activityevent/gsuite_workspace_password_reuse_enabled.py sha256=wawKdBHsfpMTRMrywOqnajQfp3PA_knikVfzeOwyUsA 5075
pypanther/rules/gsuite_activityevent/gsuite_workspace_trusted_domains_allowlist.py sha256=58pfLMIeUZ5ELAvjbiiZL9rSjFLJBOXXftmP2NIrqJc 5202
pypanther/rules/gsuite_reports/__init__.py sha256=DR4CHRmtX37g0PkC-_JJHTrwz_QhDQgZq-8JWciwEDQ 418
pypanther/rules/gsuite_reports/gsuite_drive_external_share.py sha256=E5n5tu6G30IvtoBMSsBzCFXYtODkyFxMTH2QUA_nB40 13000
pypanther/rules/gsuite_reports/gsuite_drive_overly_visible.py sha256=MKc9jTGPQAZvBKWsnTwK_AShsOGz1RIzvsDAKV-ZPjo 4455
pypanther/rules/gsuite_reports/gsuite_drive_visibility_change.py sha256=RturNyYmlG8_1lsdkQYbe2-tBfvZhiXFMR1l9HzxOfg 26086
pypanther/rules/indicator_creation/__init__.py sha256=NubhAOTU8qCHwhXDey_Q65akkevhDgqVbixnDfyotpc 285
pypanther/rules/indicator_creation/new_aws_account_logging.py sha256=E4IzywFZfjlr541w9-sj8pFQ9E0raL8m258451tpyr8 4574
pypanther/rules/indicator_creation/new_user_account_logging.py sha256=15JSZvZziUPSiSiM_7Mu9KEIdBmep88xAe1cJ1xg5Hc 4560
pypanther/rules/microsoft/__init__.py sha256=Y8ubquDPaw5eEkjkpioby_1D8LAg_O-K7UC_KaeuL4w 712
pypanther/rules/microsoft/microsoft365_brute_force_login_by_user.py sha256=yR--QFrSnVAOxqxje3QG2lchQu7mOnhWQxbh5nBWZxg 4732
pypanther/rules/microsoft/microsoft365_external_sharing.py sha256=76KvVqFYQGxfnKrrhpxUwlBfCgDr-Ji09_0i7Zuvqow 10074
pypanther/rules/microsoft/microsoft365_mfa_disabled.py sha256=Rbj8MhCqFS60LisskRLhT9evtJCKqcZkkmyJ1bchK4o 6415
pypanther/rules/microsoft/microsoft_exchange_external_forwarding.py sha256=soaVGOQImBFgpllC2YEGHdAUXRq8UkJlCLP0L4us_VM 10694
pypanther/rules/microsoft/microsoft_graph_passthrough.py sha256=2JZB8A4E7RkAXga6bG0OTYCQeSubdNfOChBNcar6R9U 5419
pypanther/rules/mongodb/__init__.py sha256=NcXn0o30OcSNdZ2xeMhqruacLe52-M0tFPf_zofM4xo 1476
pypanther/rules/mongodb/mongodb_2fa_disabled.py sha256=GehIJVyHNm23wC9P_FyO350Ld3MRuxwHdr8spgVsFzI 3427
pypanther/rules/mongodb/mongodb_access_allowed_from_anywhere.py sha256=03qeVolgFEHXewXLFJu3BrrzKJPSLK8ixQC2xDEGQs8 2914
pypanther/rules/mongodb/mongodb_alerting_disabled.py sha256=oj5PIkT9BYxsXDx4jUw3OfOuqmQMu2wxh7HmZUeVJLI 2592
pypanther/rules/mongodb/mongodb_atlas_api_key_created.py sha256=-0DHQNVFuahfl5saQh_9Yh9ggdMXanX5gDrRJ_6BADk 4066
pypanther/rules/mongodb/mongodb_external_user_invited.py sha256=zFE-loVmt_IqfD0x5Yl4yfFDVP7HZhKpaVPuxLjSSQ0 4338
pypanther/rules/mongodb/mongodb_external_user_invited_no_config.py sha256=i5Qz2pjolz5gYYqgG2Ht5r0HKfPqUPSev9iLq-b7FZY 3971
pypanther/rules/mongodb/mongodb_identity_provider_activity.py sha256=wRvn-7CeejqIvpTuoN3J9zZAY9ZEI8qOcgO6alfLzpM 2145
pypanther/rules/mongodb/mongodb_logging_toggled.py sha256=hChiISBHnX9g6Bs1Qp_Qz7DiXOJrynA77KhpaL7fa6o 3413
pypanther/rules/mongodb/mongodb_org_membership_restriction_disabled.py sha256=n3kQlVdOlLIOdj6hsFOLF0CM4nTq0I0W_dmiz6pIgmE 3294
pypanther/rules/mongodb/mongodb_user_created_or_deleted.py sha256=7Z4M55BMXqWNwj0Y7c4QuvJETm0x80R0FwPwL3vH7Cw 4936
pypanther/rules/mongodb/mongodb_user_roles_changed.py sha256=KSoFm5wtmA--ZC1Fam60XPUjG7IJQQBij9j4PPuR49w 3508
pypanther/rules/netskope/__init__.py sha256=2frCPquEt9lM7N7r1vhzmpD_D77tVVShQqVmI78lFjc 646
pypanther/rules/netskope/netskope_admin_logged_out.py sha256=QN1tet6pp7-kpM7DG7xxdbmFRIs0sHBPjqng2dot7nM 2839
pypanther/rules/netskope/netskope_admin_user_change.py sha256=Mvx22lpVavhK7JdnQxZrMxSLkY3toRxtBN9hvw-6aCg 3465
pypanther/rules/netskope/netskope_many_deletes.py sha256=yMqsus3K8g8UfrP_7X6MlGCBeSvMAzCUUP6zv-K9xrQ 2659
pypanther/rules/netskope/netskope_personnel_action.py sha256=jts5o47A_mQDze6ioRupHGRaT84k-DxA6UShcMbSF7Y 2775
pypanther/rules/netskope/netskope_unauthorized_api_calls.py sha256=kdP27WIDxoCkaCl6Z1fRQagtsvuZk0sIq9FlC8PClMs 2956
pypanther/rules/notion/__init__.py sha256=NfsfGbebWiBUls_oe-65Pw5HS5y9h0GhRz3cPpJhIIg 2002
pypanther/rules/notion/notion_account_changed.py sha256=vj4FUc8gnzrxXnLZGr40Pa2GPfjfrdAOyEWsgyaDq-U 4466
pypanther/rules/notion/notion_login.py sha256=tunOPd8IVESEbI5iNQnp9rdiUJOf5XUADHYTTdQVeOc 3656
pypanther/rules/notion/notion_login_from_blocked_ip.py sha256=WENpFnf31PWFG6SwvJeeVdN972i0lNH4XhabhaVrouY 1431
pypanther/rules/notion/notion_login_from_new_location.py sha256=MWc8ZM_akCjFWDNPCC4_K49nakTG8qkDqNtgRBHKceE 16130
pypanther/rules/notion/notion_many_pages_deleted.py sha256=DHmrQitv9O52NrZqBL3uhiewyu5c9fbe6JxjOyu2Ylk 3161
pypanther/rules/notion/notion_many_pages_exported.py sha256=x4R8M07mjpLsxLpn8254s6uCLalg41nTN7VC3DpjRwc 3155
pypanther/rules/notion/notion_page_accessible_to_api.py sha256=5ZA8ZmZuNoSNxyKzy33oVtUlRZTeuEKHOg3_iCzH7LM 1621
pypanther/rules/notion/notion_page_accessible_to_guests.py sha256=yycotsD3x35Y5zkUUcFrjrSLVoVLFjB2rhFNp-JMIB0 5215
pypanther/rules/notion/notion_page_shared_to_web.py sha256=JDDsixF8Dk8JIjskybnjD_jd53OerXLw-jGc1qtsvNI 1575
pypanther/rules/notion/notion_scim_token_generated.py sha256=sGKIQkflKGr0VMvA2Z-VmpEdw1zlhDsUStXWEXFbvyY 2885
pypanther/rules/notion/notion_sharing_settings_updated.py sha256=6rVEdsCnD-ms-vdxGPPwENuSOw1b0iPY23OImz25tLo 3810
pypanther/rules/notion/notion_teamspace_owner_added.py sha256=ejAtz_FHkGPWdlQbsCAHo7MoLX4O3Ns0iWHlwopEmEI 4544
pypanther/rules/notion/notion_workspace_audit_log_exported.py sha256=6Yo2arn_Eg4GJX9Oks-NPgQfo2-pc-ZgjJYlwCtwlfc 3013
pypanther/rules/notion/notion_workspace_exported.py sha256=ooWpz_Vu3W_bPUpZNwVrjvgWi6COjgovmNuobS7nols 3174
pypanther/rules/notion/notion_workspace_settings_enforce_saml_sso_config_updated.py sha256=r4ZwrZLrDdVg8n_SK_eU6k5OhebSqH7fl_wbSsuKKdI 4543
pypanther/rules/notion/notion_workspace_settings_public_homepage_added.py sha256=AW6095deKVVOQwvdbh-Iat8Wx40Xv2trtycWyDc9UaA 4205
pypanther/rules/okta/__init__.py sha256=tF6cwnOD79_iA2nYiBNRJta0UOvwXBmfD-fBrsfR8dc 3295
pypanther/rules/okta/okta_account_support_access.py sha256=ILjNx-P6mgQlKo-p35IqhjU7j8cUARs_g3wc3ZmpmwQ 3640
pypanther/rules/okta/okta_admin_disabled_mfa.py sha256=7HXF_eL9TUlgPU_xd0hD7fVmfIUUsOz2BVcDkPV5uAM 3487
pypanther/rules/okta/okta_admin_role_assigned.py sha256=6U72NfTnyPUcwMpfw_qeNp7YhALqEONOvTPcLzTiMyE 7451
pypanther/rules/okta/okta_anonymizing_vpn_login.py sha256=scLQWXwfn1agJSEAcK_0NWsecEX1EEpQ4Tes4NFqN7Y 12261
pypanther/rules/okta/okta_api_key_created.py sha256=4x4JmbGsBV9iYHGVPHImNrnh5nvZO4KTEprcu-ibvOM 2583
pypanther/rules/okta/okta_api_key_revoked.py sha256=4HceAcZuVJkMfN84Pjq2groqt5szT-JjZ7JFLWLqJUA 2459
pypanther/rules/okta/okta_app_refresh_access_token_reuse.py sha256=qXTl9Fd6tbMI3lUgLW_gUqkD1pP57QcHhDhqWOB-WTs 9542
pypanther/rules/okta/okta_app_unauthorized_access_attempt.py sha256=qeBoYbCw_HJhupJ5OYw_ujVXfVv6Cvajlp1tbn5mWYQ 7754
pypanther/rules/okta/okta_group_admin_role_assigned.py sha256=5GEJISRlFVs95OXgJZyzyOLK6QRZoQiWlTGedO2fF0E 7658
pypanther/rules/okta/okta_idp_create_modify.py sha256=RH3dKZbUbh1poxLIAPWrfKSNCNGsIPLgzn4rp23xxrM 8542
pypanther/rules/okta/okta_idp_signin.py sha256=bsyWGmuZmrqKLmO5nn8bo3tXFz928oVYoq_sWAGjVj0 8639
pypanther/rules/okta/okta_login_signal.py sha256=XlYV5SM4BU_mF_8iztnhPYDaySHv_TCTAyzAd3F7DfA 11262
pypanther/rules/okta/okta_login_without_push_marker.py sha256=-d46vQ7FpsxayzqzdTo-FJGTUtAZ2E0yP1xMxRkvR58 6216
pypanther/rules/okta/okta_new_behavior_accessing_admin_console.py sha256=F_pcW5ksBB2q5a5JxcmB-1zrgzEZdUU61x48mMsNFfw 14218
pypanther/rules/okta/okta_org2org_creation_modification.py sha256=WwPIXmpLsdoaEExYDmdrp9gLOhMpsKKS1qiXWX6piJo 13928
pypanther/rules/okta/okta_password_accessed.py sha256=g_GRAx_NNOUyW2bRaV0jfvYVmetMOe0VoFWLRHMiM-c 11512
pypanther/rules/okta/okta_password_extraction_via_scim.py sha256=LIlP0J6Kl2DmA-7_1GnHEyqh8d8qFo9BWGcW_y7pD24 8147
pypanther/rules/okta/okta_phishing_attempt_blocked_by_fastpass.py sha256=-78R0A8lcmCJJ1CAFeFKkeT3dcDubBpF6zWuO_feNhI 8098
pypanther/rules/okta/okta_potentially_stolen_session.py sha256=1HXmep6biiyGVB6pZmjXdolEEa1dTmkL0OrxKm4bH8E 19929
pypanther/rules/okta/okta_rate_limits.py sha256=xeoH2G_Uqk1oPLMEJdna20u_9HxQgTJmQdz2yvR7SlA 10842
pypanther/rules/okta/okta_sso_to_aws.py sha256=oTUKw4u5fknlEev4dtm7xGMHFGCh50RtgiBeiJNQDhw 2533
pypanther/rules/okta/okta_support_reset.py sha256=dMoov3aNKJ7pehao84jcmTVrYUKHU9wu4AEaPwopQ24 5155
pypanther/rules/okta/okta_threatinsight_security_threat_detected.py sha256=pNuPLVk3Z43_Jo3PjZHZfAshIMBGlvBOHBbpW-y2erw 9459
pypanther/rules/okta/okta_user_account_locked.py sha256=TdLiPEYOhJLoA0SwvOINfOFvMiJemDZdv-jZW8mFKBQ 7186
pypanther/rules/okta/okta_user_mfa_factor_suspend.py sha256=h6bA_FMNoiF-3vccw-yhMt-mVJeDEMcT9qEDDHXjypc 7438
pypanther/rules/okta/okta_user_mfa_reset.py sha256=emtnHTwErv64cxL3pUfV8_-ToJyJGNautbq7bEh6iA8 4252
pypanther/rules/okta/okta_user_mfa_reset_all.py sha256=uoZexilS6boA1TJo1RSowr5fTtmSZ58-ntaI1eopOCo 5720
pypanther/rules/okta/okta_user_reported_suspicious_activity.py sha256=TAA2L03U7y_ebSXu1PnyuApAi8c5fdnDnFMxcHq_gCM 8876
pypanther/rules/onelogin/__init__.py sha256=E_oN7DV5SgYccQYuheS0DeS7wI5mUpw6HIx-kZSRKY8 1388
pypanther/rules/onelogin/onelogin_active_login_activity.py sha256=rTph8t1cirDKvpNsrVqbLGxlyV_GkwmBIDzp1tCWj1Y 3683
pypanther/rules/onelogin/onelogin_high_risk_failed_login.py sha256=CtGzuAm_TQK2vwTWOwtpNSnynj1Hdfo2nkLjqWuEyag 1879
pypanther/rules/onelogin/onelogin_login.py sha256=qoLyrKsa8389sT2AYTvZtvrMQowtr3N7j91b11cvYho 1438
pypanther/rules/onelogin/onelogin_password_accessed.py sha256=T3oPoYN548OGFo5H0SX0uUsythKcdosPLRB5Yqdwwh0 2206
pypanther/rules/onelogin/onelogin_password_changed.py sha256=WsfWqqF2we3Mp0sZ2uUCNmkULMvQNxcayM2lelOZJpY 2197
pypanther/rules/onelogin/onelogin_remove_authentication_factor.py sha256=4E70Y-dtHyLMDhFVIIYQErQ1DBBG52GoaRcckYDZ1NY 2599
pypanther/rules/onelogin/onelogin_threshold_accounts_deleted.py sha256=Ioq7WuvUGlKAVJf0QoJgg4jvevRUWuKfzI2ai1tCLkk 1841
pypanther/rules/onelogin/onelogin_threshold_accounts_modified.py sha256=pDxN-Csmr5Gec0l8cOnaTOFSvBBnGM-63xjCDSNJcsw 1873
pypanther/rules/onelogin/onelogin_unauthorized_access.py sha256=TvDLnSYZjfU0-0IuQ3vZw5yi83OMaCpoKOdKMULsBFM 1634
pypanther/rules/onelogin/onelogin_user_account_locked.py sha256=xABMrlPuVW_9BDO5_stcDAZ0LmNlf-cFhmvFymnKm5Y 2587
pypanther/rules/onelogin/onelogin_user_assumed.py sha256=--QnfOZEJppk_9pJWiU6YwRVM2H_2f5G4PCjqT3DyJU 1982
pypanther/rules/onepassword/__init__.py sha256=EayE4_VfPhYXOj7Q1vm8KgwnFAcQ_Bpzc0kQ60aekqI 402
pypanther/rules/onepassword/onepassword_lut_sensitive_item_access.py sha256=8tLNyQI6FAxRFsbDrITVKuyYALdArIjmAIvU2qQjlmY 4536
pypanther/rules/onepassword/onepassword_sensitive_item_access.py sha256=sfaD04PggDsxe3MOM0ISQCYoPgcL2XtLzMIL8tbbcbQ 3876
pypanther/rules/onepassword/onepassword_unusual_client.py sha256=fS_zNocvNXrmNxFUhMrYBTbDwZGBvPYUqL4HslpqWcc 4281
pypanther/rules/osquery/__init__.py sha256=l0USaKfOczEv261abOAyMkhjASIRNr1bnc9vqb5S8oo 1671
pypanther/rules/osquery/osquery_linux_aws_commands.py sha256=yTzp685-VLiV8yXshI8k22ubQotkRJIPtoiMBAAI6W8 3912
pypanther/rules/osquery/osquery_linux_logins_non_office.py sha256=egOpoD74o8Z1LTowGu8zc3sCNxO3NyEcNLUCrv9nvEs 3308
pypanther/rules/osquery/osquery_linux_mac_vulnerable_xz_liblzma.py sha256=h7RZqhwlPTbWa33qEIOjYH44BSGSzx-vwwiZ6d6ia9o 3611
pypanther/rules/osquery/osquery_mac_application_firewall.py sha256=I6hiUH-g01nsBy-2SI5BRqR2-aUjHIBPBjLQybGkuKw 2901
pypanther/rules/osquery/osquery_mac_enable_auto_update.py sha256=0jeWN-nh9ViSouywBncc1pLI8Hekei1je0dlUUbOhVk 2322
pypanther/rules/osquery/osquery_mac_osx_attacks.py sha256=wxgUUeRv8qsq4L28vtUMJjZLA05bivDfnBktXBp76N4 2126
pypanther/rules/osquery/osquery_mac_osx_attacks_keyboard_events.py sha256=duIR_fe_k-OOXhdnELLmq5JZzERq004ux1u-Gyrazqw 3940
pypanther/rules/osquery/osquery_mac_unwanted_chrome_extensions.py sha256=R9vKSv9E5d-zp9N7y8Z-OIYB71seyxPVBXZW041JS_w 3802
pypanther/rules/osquery/osquery_ossec.py sha256=TYf86M0Sxt4dtWvukWicjgqrrIsV8Tjavhfv-WioI0Q 3612
pypanther/rules/osquery/osquery_outdated.py sha256=uPbo4HoqLTEE4_az45I_beQxbRdDmriI-G1iuXjJiTo 3639
pypanther/rules/osquery/osquery_outdated_macos.py sha256=kLqMQBOPV-iYLzYfWfGcUnhIEveQmxGin6MwBrdNMEE 3784
pypanther/rules/osquery/osquery_ssh_listener.py sha256=fFlNzKxEpGZeG-XrWfuQ0Ds7SSuSUsIQ28iF7nJEMOc 3821
pypanther/rules/osquery/osquery_suspicious_cron.py sha256=zlHmKOuaIUUi1lk_4S9lsWdkMx_HNACHKZ4tPBTTvUs 5841
pypanther/rules/panther_audit/__init__.py sha256=1DlsTB89ciKEXrOhtIifAEkAmemH95iCDsOAh7ZPvIM 451
pypanther/rules/panther_audit/panther_detection_deleted.py sha256=GJPLUNSZ9TMrbRESd9zshSWPVVYeHi895bMgxYulc_I 4402
pypanther/rules/panther_audit/panther_saml_modified.py sha256=Nri9Gns-yoExHCUS9ozV5h8E7D-HuY9vu5RE2nGNkFU 2356
pypanther/rules/panther_audit/panther_sensitive_role_created.py sha256=hnlsqIzC96ljwBB3UHkfMybCnrjzdLb-8Pv_vrHIzEw 8446
pypanther/rules/panther_audit/panther_user_modified.py sha256=0TRllEQAlNYLuhLvmzPvoagI7qVgFz--bEFwWe-Qs8w 9965
pypanther/rules/push_security/__init__.py sha256=mrJ8WKWIleUp-6_ICUgMz3OlZAiYDxtsp4x11swYNbg 1356
pypanther/rules/push_security/push_security_app_banner_acknowledged.py sha256=dXlDjeHSNiFH6RhqAc2auFuFd6Lzl_k9EURfTkiiW1U 5930
pypanther/rules/push_security/push_security_authorized_idp_login.py sha256=OshMxXX_shud3gSBXMasYEvptk34Nf3jaACSsVSJK8k 7271
pypanther/rules/push_security/push_security_mfa_method_changed.py sha256=vGXb6tNwcx78vEdO9qOP3d8SmjyLOAs5YA5G_W0lGMg 8537
pypanther/rules/push_security/push_security_new_app_detected.py sha256=UCzS3YCFZFt27daFAUAIC_tY-JvhJ9Q7if6CCkkTxi4 2587
pypanther/rules/push_security/push_security_new_saas_account_created.py sha256=Ku5k3E9D-qJ-3_yXvHjGZi6upyIVGe4lOkmhlrYlNHw 5703
pypanther/rules/push_security/push_security_open_security_finding.py sha256=M0nGPPVXPIFifPJqjj-iaRQWMxJFHXXkaJkhq04Q6bg 4681
pypanther/rules/push_security/push_security_phishable_mfa_method.py sha256=PBQCfU8XnVRjISQGlar5wuX5-LIG2rQhk5GyAdSbr6k 5487
pypanther/rules/push_security/push_security_phishing_attack.py sha256=UrqkpGifyVkE64yAaUS7NYMgv9lUgpbigz68y1PB4zA 3779
pypanther/rules/push_security/push_security_unauthorized_idp_login.py sha256=K2BvnqBhEkmsSoRYkA8-kGD-7GgjQ2YwqCCxtZj4nL8 5904
pypanther/rules/salesforce/__init__.py sha256=6zQArZOPiEhFcZ-MBZjzB1hS-9eJeUjhPniE2B_4psI 136
pypanther/rules/salesforce/salesforce_admin_login_as_user.py sha256=djbilpSVuip01_lh9CFQO9xxZuWa5_vNa4XxGG362HQ 4716
pypanther/rules/sentinelone/__init__.py sha256=94AX-XXttctnZMgSTkqFLTzRYFaCa1gyYZjy5npxTbU 239
pypanther/rules/sentinelone/sentinelone_alert_passthrough.py sha256=frfwgBs0U1ccQ_914buwSh0tjkT2_sgpTThNOLxeLz8 7447
pypanther/rules/sentinelone/sentinelone_threats.py sha256=inWzRdS5hHB4whcnkxjtu4BU7TfBf_SHoX2ArN_TUyI 6673
pypanther/rules/slack/__init__.py sha256=3Y9uBkynvZNaRQEVoj9ZPxuKTRpK1CAb3wD1H_nJ5RI 2995
pypanther/rules/slack/slack_app_access_expanded.py sha256=PAmBVJqkUyiYx1XoaOyWVinUTU_licGfic6OyfPpb1E 10388
pypanther/rules/slack/slack_app_added.py sha256=TiY4fuB439SKGA-T_8PzEK311SdMiO7y8Y-46sugwKo 9451
pypanther/rules/slack/slack_app_removed.py sha256=0ZO_ksEMjpfaaJzkIw6w4BXMYf2nZNGwLfvAbKSnYBY 6959
pypanther/rules/slack/slack_application_dos.py sha256=m4D9l9QU15eoxyld406_yPDK0QuULIF5kzHYr_2OVqQ 3518
pypanther/rules/slack/slack_dlp_modified.py sha256=K1UAUbozL1m78cS07bHKtw0zCyaiANjQhDwYysE9ltg 5108
pypanther/rules/slack/slack_ekm_config_changed.py sha256=HEl50YSHgVGxrstqXoiexYKO5rxgFYXVHg9jZF0olKY 3536
pypanther/rules/slack/slack_ekm_slackbot_unenrolled.py sha256=uCHrfKh73_Wqvszj9kapgU4vipBdduaksOFyWOt2n78 3485
pypanther/rules/slack/slack_ekm_unenrolled.py sha256=3pVjPH5v1rZwiUnuTxNb0DoXvGntYzuu8LoCE3U0sAs 3408
pypanther/rules/slack/slack_idp_configuration_change.py sha256=JJFaDYF13cDEvSnMP-7Fnoz74hr8_TvCrF5eztw0WsI 6155
pypanther/rules/slack/slack_information_barrier_modified.py sha256=7OAgNYvcWt-QAp1h93XpPMwytBK7V623_1co0OQkfJc 4861
pypanther/rules/slack/slack_intune_mdm_disabled.py sha256=bG18RB3n6Bjo1n0fZ6uykiGTQcn7umint1tnnNLu2LE 3411
pypanther/rules/slack/slack_legal_hold_policy_modified.py sha256=FJ2r9icoFs7u1mpwggzDS3bnNIqKrD-P-zTkxNImEMY 7332
pypanther/rules/slack/slack_mfa_settings_changed.py sha256=FbZwas1Xs0nmHC4y9iANYFYHuKI7PJSdL1o6-yi3qi8 3477
pypanther/rules/slack/slack_org_created.py sha256=iRVPmZkQeMOhCoE8zdq2SJMgWWclW0_wSmkG5eC-P2w 2895
pypanther/rules/slack/slack_org_deleted.py sha256=0F64lcz_W2gFOze5ybvz9D_cRIujOMqnZ6oEifAIHrw 2895
pypanther/rules/slack/slack_passthrough_anomaly.py sha256=8UUCIZtnRncpWanVId9q3rTEr8kmH6LLmryeYbE-aeo 5643
pypanther/rules/slack/slack_potentially_malicious_file_shared.py sha256=or1_u1C8dUx3LxvQU_2lP-4iF1dom3d6zdMFXPCf-oU 3464
pypanther/rules/slack/slack_private_channel_made_public.py sha256=9op_exnHN3sz-EBJ_eddhlpv6wr901GIjFOQkNDkvpk 3656
pypanther/rules/slack/slack_privilege_changed_to_user.py sha256=O2deL3DfiD3jH_GSbUsPFMlOcduHc6KVjgZelpLmB00 4241
pypanther/rules/slack/slack_service_owner_transferred.py sha256=gEG9MqxagdKlJRRSf3bnWCc_6vx1DpNf0Ntqc7ZGBKQ 3625
pypanther/rules/slack/slack_sso_settings_changed.py sha256=NFSfrau4faaocGJEJVdMex7PL3MaU-Q9FoQaQA2cB1w 3461
pypanther/rules/slack/slack_user_privilege_escalation.py sha256=QEuROQPm_NoyWTnvSFUAE9WRQZ0SXbo8cQ0ivggBWqo 9408
pypanther/rules/snyk/__init__.py sha256=-UGy9Es2zciIZJdasM_vqg215I-jSvw-GBvLlJ9e7VY 931
pypanther/rules/snyk/snyk_misc_settings.py sha256=bfUbozudFrqgRKIy7yfVPoXVJu86XgCzxhlriCr-ujY 2489
pypanther/rules/snyk/snyk_org_settings.py sha256=0oUhRIty4gBZCMCyw7r-ZFrfTACReYizhLLA8jjx6p0 4558
pypanther/rules/snyk/snyk_ou_change.py sha256=NRn8tKv_xgWG1pkTVrOfZ4GzZ6yUAx46XHOspqFA6Vk 4542
pypanther/rules/snyk/snyk_project_settings.py sha256=H_mOGnBvycTDw8mj9Xr7QVxjOGkOSco0zOhciPt11SQ 6046
pypanther/rules/snyk/snyk_role_change.py sha256=mGByvXhAOc_6qIOKvldvp41TUJHDj-lGa0l0dD7bmmY 5349
pypanther/rules/snyk/snyk_svcacct_change.py sha256=UsgRktvt3Qmt8JOCPbqpD2Qg-qc_e-5-VcmA_NWdF8E 12474
pypanther/rules/snyk/snyk_system_externalaccess.py sha256=uMYmszkffNQ9X-eyJsfkwS6dQ5d3OGSrMrFyPz-N6m8 3848
pypanther/rules/snyk/snyk_system_policysetting.py sha256=VufaO4BRFQVwll8bsJJBSwLcUrCNUMziW5fBdSJNlxQ 5971
pypanther/rules/snyk/snyk_system_sso.py sha256=FF-6iuWot7ZMrkj2kD4priwua-RzYyCogRSKLyf0XbI 2482
pypanther/rules/snyk/snyk_user_mgmt.py sha256=sHy4qQcqO2nibUtbUZW7dSiP0atRsBv0_6zXeo0JJVY 5865
pypanther/rules/standard/__init__.py sha256=g2B9viwzkTAfzqyziJ5Q-rQGtjMKz9vTSME6YTUP2-U 667
pypanther/rules/standard/admin_assigned.py sha256=deGZTUWNOH_5ecjcqSWzwzPp9o2hvluFY5Df4qe1ABg 11252
pypanther/rules/standard/brute_force_by_ip.py sha256=b6CIsR5PYzlQ6GnnfVaXuU1ZKzbM-k3ysxT5UUjRmu8 17704
pypanther/rules/standard/impossible_travel_login.py sha256=-KZxJflbmpXBtQlgHK7T1LrrwPrHWH76Kg0ZFgnT7CI 43384
pypanther/rules/standard/malicious_sso_dns_lookup.py sha256=JPKh6ympfM_gGpo9sX13Bn6zROXxnuAMPc7OxRPaGTo 10138
pypanther/rules/standard/mfa_disabled.py sha256=3S4-lgThFUkR2kobySxKYawt1j-GDTbQt2FjpDEerp4 8757
pypanther/rules/standard/standard_dns_base64.py sha256=pC7c6EgupooaCr4aIciMQKVbFfAiCPkIqOKhF4SFBHc 13360
pypanther/rules/sublime/__init__.py sha256=2UefRS_Qp1nUGQrVVf52wmNTrDrR3zwGOZmyzD3WO1s 549
pypanther/rules/sublime/sublime_deleted_or_deactivated.py sha256=2Jnuon4RkKxyqYbENYuS-qbmTCqBAfSTA4HjBwtTkG0 4361
pypanther/rules/sublime/sublime_mailboxes_deactivated.py sha256=MVLHZVArSD_MtiwX4aY9qaWtk8xHIHwkHf0V454jFxc 4324
pypanther/rules/sublime/sublime_message_flagged.py sha256=TqdDjUVxVtR1XNDJq5Lz25y2QiA25_hHSOCfhp2G_6I 3600
pypanther/rules/sublime/sublime_message_source_deleted_or_deactivated.py sha256=Cfe_o_t9WEj-KuT--p-8td6zRBiQJWokKhJL3TDijCM 4455
pypanther/rules/tailscale/__init__.py sha256=wkEC1pnXrYCXfxiuVo29rpGTejkv_ssv2NCFToRsBuI 422
pypanther/rules/tailscale/tailscale_https_disabled.py sha256=Uf3-w22VK56vCpa_5hdhQesjG48g72_R0aaKbr77mVM 4475
pypanther/rules/tailscale/tailscale_machine_approval_requirements_disabled.py sha256=3fzMbQnHAIe26cDRDVP4S9UcK0zUyRMJ3N19K-fGwHw 4873
pypanther/rules/tailscale/tailscale_magicdns_disabled.py sha256=NbFG8nbT7nE3hIs-lVYVQDpoQjxYeWmxcnRHXwbAn7A 4484
pypanther/rules/thinkstcanary/__init__.py sha256=QLsniuCOoasYkL8T150Up-FRkt2Xy6gx0eHcua2hfEU 351
pypanther/rules/thinkstcanary/thinkst_canary_dcrc.py sha256=ScYk8QZXZTeCw1x9TStig-OCsO_oebpCUIfi7So2OLU 1352
pypanther/rules/thinkstcanary/thinkst_canary_incident.py sha256=v32NlN1aq4tu-0Sb8afoO0Tgq5bmhrBWYbnjvi47NxM 1894
pypanther/rules/thinkstcanary/thinkst_canarytoken_incident.py sha256=l9xKtTDDOY1FQYY7R8VRUt8Ec2CmN30umcMbY1S0-3g 2111
pypanther/rules/tines/__init__.py sha256=z-eVlzbb7xhKl67YgKYXnrzfEImRQITBWqq5WISJ0D8 1074
pypanther/rules/tines/tines_actions_disabled_changes.py sha256=K9Tuo-gKUSwrjTbBm0NFyOvk6wSGF9sAp126pUuz_Fo 2440
pypanther/rules/tines/tines_custom_ca.py sha256=Snfz397mcBBC1zkvHV1vwAYw3ETlprXNFt_9SxOa8fs 2687
pypanther/rules/tines/tines_enqueued_retrying_job_deletion.py sha256=VG1pj94NJsZ0u9upSWJBkZ3knTl4JLrF0pIYXNrTg-0 3418
pypanther/rules/tines/tines_global_resource_destruction.py sha256=bH_yLWgaAwyqbdEILrnUuIwnXDWeHEa-ujUOLweszt4 2719
pypanther/rules/tines/tines_sso_settings.py sha256=qzUp2VmrC9ZfD9TGzTywYWSx9JQuqKFrQzH3JM_jh6M 2862
pypanther/rules/tines/tines_story_items_destruction.py sha256=IFc1HlCX64PyQZUzswX4yfWLvdhLrx6fx2zeQY_gM10 2604
pypanther/rules/tines/tines_story_jobs_clearance.py sha256=i7YH5JWiRqwuaoSyUpe43zBBNHfKwEHxCLykehkIwAc 2592
pypanther/rules/tines/tines_team_destruction.py sha256=HVOySPgY0-xP22oy-GKxc4PXitqlRaEkK9CzYja5mx8 2569
pypanther/rules/tines/tines_tenant_authtoken.py sha256=hXkP3wgfau02IaEAI0FbRNUvR-jkaW0-tVDAQTV3HUE 3927
pypanther/rules/wiz/__init__.py sha256=WKmuYqSPHEUiSa1fTNPuNU2iiHbfeUHyJRDOxug6Td0 2130
pypanther/rules/wiz/wiz_alert_passthrough.py sha256=qu1DqvuDWCcA-hP2L6OEoIFd8tCuipHbQ96d1lTNYG4 6357
pypanther/rules/wiz/wiz_cicd_scan_policy_updated_or_deleted.py sha256=WeJyHgbj-0B6pZpWtNNf7n2o3zwhZvvPBZSoQOxzNJQ 3806
pypanther/rules/wiz/wiz_connector_updated_or_deleted.py sha256=6c3QMgq4tU1JyPLadccq6jM9VDrq_c8x3RizVXT8b-Q 4160
pypanther/rules/wiz/wiz_data_classifier_updated_or_deleted.py sha256=7Ct2cHrojlfkJ7C49CeVdLZ-jPqn4MCKkVWLSzEiNm8 4209
pypanther/rules/wiz/wiz_image_integrity_validator_updated_or_deleted.py sha256=oJJTH4DaqrT5KoesgeFWWoqNYcSsqxOFcglIEZ4hIIs 4086
pypanther/rules/wiz/wiz_integration_updated_or_deleted.py sha256=1JiizjlBcGyxLHEp8SggHVdpvtNA8c07zQ4ElyYlOXM 4171
pypanther/rules/wiz/wiz_revoke_user_sessions.py sha256=GMCeQ6aci-2FTMOmCeaguQLvkL5YcGekxtMv5xvcFEU 4044
pypanther/rules/wiz/wiz_rotate_service_account_secret.py sha256=mrkBIxomZfY_JSkXr7lYqoMUSsb337VZpQA4Oy1frZ8 4696
pypanther/rules/wiz/wiz_rule_change.py sha256=EHzuC_FzQEElJHZaYmQxcVxnfTNjRkJkIcWsGLKQwds 4907
pypanther/rules/wiz/wiz_saml_identity_provider_change.py sha256=YsU38n5ZvbCHPVpIwTYDo7eeWolSe7FDt1wOLzSVs_w 4092
pypanther/rules/wiz/wiz_service_account_change.py sha256=KV5yY-gZFDlHIJ5MPY7TInCeCMoJkNQDo8wHmvlG-8o 4172
pypanther/rules/wiz/wiz_update_ip_restrictions.py sha256=14nmM_Nbv3Gjj6espFZquxPSjMrmfMU64IbGcQ-7ik8 4329
pypanther/rules/wiz/wiz_update_login_settings.py sha256=n8xcWoBCkgfQGgiH5pUXhpa5Sr92T1hnXbheXMPu3Cg 4118
pypanther/rules/wiz/wiz_update_scanner_settings.py sha256=WqrYf3q_gko3n8oMBqsZiDTFPXRYr1BoyxWW3to8Tpo 4842
pypanther/rules/wiz/wiz_update_support_contact_list.py sha256=rnc1TJaC2kCZLHdDyuM7kvUgKMcmER1fJvf-sQYZPts 4228
pypanther/rules/wiz/wiz_user_created_or_deleted.py sha256=YkkUdWilV8Su9N0oDBWVud69NGZ35IXrI2f9-YeKfzE 4087
pypanther/rules/wiz/wiz_user_role_updated_or_deleted.py sha256=jDDpJtLuRWeb_yM_GB4QnwoPHbUjLIzHKBNyn12dezE 4398
pypanther/rules/zendesk/__init__.py sha256=pLZVpSQUUENNosv5N0pF0opwr_WGqD2PDQfNLwBLXOM 808
pypanther/rules/zendesk/zendesk_mobile_app_access.py sha256=vHL2ipEJ8Y52-dgXREfUnyKn0kGsQfSBN-yNtTfayZE 3832
pypanther/rules/zendesk/zendesk_new_api_token.py sha256=3pVys4JIVDcl8pM7WOgUNEYOEvuUMEeGxh96DZorAvA 2944
pypanther/rules/zendesk/zendesk_new_owner.py sha256=3p-9n731zJyQ2DcBJJyKWksiebzF82Ajf3EJbv_SIlU 3126
pypanther/rules/zendesk/zendesk_sensitive_data_redaction.py sha256=O9Qv88LgmAzE__gS4p6UFbIhvDGbh6u3Uxg-Z-rEWYQ 3772
pypanther/rules/zendesk/zendesk_user_assumption.py sha256=DXVp0flG4zyH8LR14Gh8CrrN2IUmWC7CyY_lB5-x5iw 2936
pypanther/rules/zendesk/zendesk_user_role.py sha256=dmPGExu8iJK7eE8fDGxD6edXlCW66UCcym9AlbjYoxk 2792
pypanther/rules/zendesk/zendesk_user_suspension.py sha256=Az838-qVV3XTaFrSFQdZKO2Lx0TVjcrhUmnZZ8zkFUI 4015
pypanther/rules/zoom_operation/__init__.py sha256=mbj19WRs3Fwr5U__Uzjb5Yroh3KMHfcbvjH014_fqU8 1247
pypanther/rules/zoom_operation/zoom_all_meetings_secured_with_one_option_disabled.py sha256=voKd9BZqigf970E3s6qD2j25z8AvzQK-5OFevHULsJQ 2641
pypanther/rules/zoom_operation/zoom_automatic_sign_out_disabled.py sha256=Rpfo4dHzrYrHRRXp4d4PLHAAZgsDZbBK_6LyJzoc-JA 2320
pypanther/rules/zoom_operation/zoom_new_meeting_passcode_required_disabled.py sha256=gKgTJEV5HpkggwCUvafM9tXF6wyhNGzRSVldi5uQXhI 2768
pypanther/rules/zoom_operation/zoom_operation_passcode_disabled.py sha256=J_Rwnnrn2K5ShOrle7ktie2RTIHMKus3Ypl3ZV17ZL0 2736
pypanther/rules/zoom_operation/zoom_sign_in_method_modified.py sha256=Wk8FX1-ev2dJdqcavcwDVhKwJ0XFjRIbNtjQxz9-0OM 3283
pypanther/rules/zoom_operation/zoom_sign_in_requirements_changed.py sha256=m07vIRZ6o0jer6dBebCDFNweZr8XtC8B6A6MVc3K7z0 3595
pypanther/rules/zoom_operation/zoom_two_factor_authentication_disabled.py sha256=6LxnIeks0sVGR8Inl2d7ao0PM5ZuCtf3chPfz-2tZVM 2606
pypanther/rules/zoom_operation/zoom_user_promoted_to_privileged_role.py sha256=LOZMnAwoaZZYvueQrCx2O61vkf1KiCFoApQrUYCsLv8 4693
pypanther/schemas.py sha256=NCa6vRFz5nMFL7mEAs7hskjm6gzACRN2OSG97R8x5vk 14053
pypanther/setup_subparsers.py sha256=0myz6iewX0xidhKEzfYVZYVNF2gM_Po-axu8qEbV6VE 6363
pypanther/severity.py sha256=LBScXp8lQfI6MqEWVydBfqbjWb0t6nmYph7IFKgDT3I 1922
pypanther/shared_args.py sha256=ERYCgJcEDTEU-B6u3U0rYY5ueJ0dVMFIAmM3V0DOZQM 2785
pypanther/testing.py sha256=T5z4_2MocxZAWSwG2pcmU1LtcgQKXS9wUnJs5YHUAMU 15079
pypanther/unit_tests.py sha256=q-SroUXHxXkYfwqY3E_BkdP-8xrvKf-gVUdxdNmNz7E 3212
pypanther/upload.py sha256=QXuktUT72yJq5he36dXMG4e7qDmp3MJkbT1IVXo_6oo 19482
pypanther/utils.py sha256=yCmIJn2fYoWw0i51hBJ8xQJ_JmlnEGdAgMXRHSjZI5U 1560
pypanther/validate.py sha256=EnAiXLm-hlxhCxvNBR8b_YeCVgTy5iwrC1r_Tgrrh48 665
pypanther-0.1.1a53.dist-info/LICENSE.txt sha256=xx0jnfkXJvxRnG63LTGOxlggYnIysveWIZ6H3PNdCrQ 11357
pypanther-0.1.1a53.dist-info/METADATA sha256=xgiuCj0elqDEjcLUfcgi7x-w75Nh-RKoYPh9s-PgQ_A 5414
pypanther-0.1.1a53.dist-info/WHEEL sha256=sP946D7jFCHeNz5Iq4fL4Lu-PrWrFsgfLXbbkciIZwg 88
pypanther-0.1.1a53.dist-info/entry_points.txt sha256=4c-SB6Ctni8K2zZF7154zWL74NXYfAeyTiGEY3dbqVM 48
pypanther-0.1.1a53.dist-info/RECORD

entry_points.txt

pypanther = pypanther.main:run