{"ID":"52844d14-80dd-8d5e-240f-3c5e2873a49a","Version":3,"CreatedAt":1765657109249,"Description":"[OOTB] UEBA package - RU\n\u003chtml lang=\"en\"\u003e\n\u003cbody\u003e\n  \n  \u003cp\u003e\n\tBeta версия пакета правил.\u003cbr\u003e\n\tПакет правил предназначен для выявление аномального поведения учетной записи или рабочей станции в корпоративной сети. Он строит адаптивные модели нормального поведения на основе накопленных исторических данных (сбор данных длится месяц или заданный период). Эти модели используются для расчета статистических показателей, минимизирующих ложные срабатывания и эффективно выявляющих потенциально опасные отклонения.\u003cbr\u003e\n\tИсточники данных: События ОС Windows, NetFlow, Cisco, Solar Proxy.\u003cbr\u003e\n\tПримечания:\n\t\u003cul\u003e\n\t\t\u003cli\u003eПравила сбора данных (collection rules) могут быть адаптированы под конкретные средства защиты информации и источники телеметрии.\u003c/li\u003e\n\t\t\u003cli\u003eДля максимальной эффективности работы пакета критически важно обогащение событий данными DNS.\u003c/li\u003e\n\t\t\u003cli\u003eПравила могут оказать воздействие на производительность коррелятора.\u003c/li\u003e\n\t\t\u003cli\u003eРекомендуется использовать правила на KUMA версии 4.0 и выше.\u003c/li\u003e\n\t\u003c/ul\u003e\n  \u003c/p\u003e\n\n\u003c/body\u003e\n\u003c/html\u003e","Language":"en","ResourceIDs":["d5ad4647-3da7-485d-8169-d1e40b3f610d","22bb654c-db73-43f1-90c8-96745056de14","f8f596ff-19b5-4689-a1b8-ac4b40424297","de879180-f927-4d30-96ac-fccea49e8f19","88019aae-872c-4118-b9cd-fffe7e611296","f0d8f0b7-1548-4e28-aff0-71e2791c8039","94d6cd05-96c0-410e-9fd7-8a09d71c3d84","7dd05181-4975-4b58-b774-89827d9c8c10","a08ad9ce-3c23-4a56-b674-74014f513f6f","a4b56bea-2bda-478f-94e2-cc8dea4e2baa","04213cfc-dc6d-422e-8f50-0372a46aa9a2","6d5c166a-ceae-4539-a516-c19ffdc3044e","12ed5baf-fa76-4c01-bce6-0182caf89967","a17b0752-a25e-49d8-b755-ed93b21b079b","40039dc7-c8c7-452d-9363-f217b74d6f74","8fc72685-4f7d-49a2-9f28-dd03f26eb945","b4c88100-05b7-45f5-91d5-dbb9d9accbdd","4472fd1e-0e83-4138-bbbf-1cfce79bf289","e3fd8dc3-3eda-4639-8ab0-cc609bf8ed5b","807df55a-272e-427d-a0ab-f3344beb5bfe","1883ae6d-0b42-4216-ba6d-6e198834bf0e","61e4f23a-6430-48fe-b7a5-8594139cf58e","96f1ada5-c2fc-4a81-9748-453a7aed6cb3","02a3b7b3-b212-49fa-b2a1-41d00ea22aa6","5ad1f55d-70ed-4704-a5be-80c60076f06a","d3936711-0b19-4282-996b-5e14f36153d8","ab103018-40a5-4f92-9306-546afc74b471","1e18bcf6-28eb-4880-ab51-a4942eac0eb9","dec9d8f5-e4b2-4853-9664-ee180d09107c","1248227d-2fcc-478b-9d97-8a57c52a27c7","d6294310-43e0-4bf2-8d2c-041aa01bcf63","0b501563-a2fa-4f0c-a8ee-018ee297c471","b0469d54-9438-4ff9-82cc-f1244a3e91d7","455d29c0-a2fb-46a9-b336-15ce84d25c2e","08bacd83-0c3c-4641-a4e3-c84748850293","0d15e5dc-29ab-4bd1-bad3-70aa53d0efe9","f2065d8a-dbba-41ff-918b-25b2997151b3","bbbfbfa0-befe-48eb-97fe-cc1988b846b2","8fe49367-e77b-4c33-908a-8e6efdfbc9a1","bb360a7f-108d-4c3b-a648-b9aa9a0231c5","69826fca-8d59-4e93-9f3a-325f67ece1e1","917e6804-7816-49e0-b2d9-1122d43864af","1e6274f4-c60a-4185-bbee-c354e22af0bb","126ab711-10aa-41a9-8dcd-5b6e440f18df","05ad3645-2b95-44bd-b2b0-a2dd61fe0a10","73ed95e4-4656-47a5-9abd-1e8300dc0725","fd6e9eee-3f08-4a95-9646-9704996f3c4f","4059105d-c169-4313-8c0b-eece151e2959","476a3f6d-f105-4c5c-8e7e-7d49b737a786","5fc648ac-5503-40dd-981c-9739636b4391","e67a0862-f307-4c07-a13e-bee4978f932b","d09ab8af-76c9-40d9-8ce3-0c454f5a8b43","2770fe10-3c90-4f5d-b45d-c45ecaaf0279","579837ce-ba45-4293-a942-3ad0af328ff7","45e06e39-a3b7-46e3-a87d-8709997c1063","2f3837b0-1eba-4d26-8667-0c727f4e96f0","9818e4a5-7e57-46bd-a40b-721cf35cda36","3dc49fd0-28c0-460c-b63b-f30a1c612e57","1decfbba-0a9d-48d1-8418-7b81f7eb640a","70f3ca26-956c-4dfd-9fb4-6a1f259c28eb","19971b10-f536-4bfb-8fe2-23b6fc502c61","15b7ad91-0a66-4779-b9aa-800d89f8e0f3","9e663907-f458-41f5-8b6f-21a820e929e5","bb14ab12-8810-4383-b055-8c431d53420b","580a2fa0-0e0f-4397-b8b7-dc93400be340","bd86f810-0d66-453d-b91d-55404170b82a","f7408070-a1d0-4469-ab9d-9512e5650f92","c9bec293-192b-4edf-b0c7-ae807bb2e658","7ab1b849-a6f5-4245-8b43-3f11ff776a87","671f9315-9624-4a3b-a2a4-721b40cf0fda","3fb15bed-5e1e-4ccc-8fce-e2e70c5ea2a1","4d9c5da6-a027-46a4-b9f3-462dda08d222","ab5dc2ac-6b76-4e77-bc08-143552a3f864","9bfeec69-7c58-4075-96ae-b620172879d3","4898db9e-5a68-4fee-bcbc-0be2093f8175","097a4ba3-c6e1-4d6f-835b-d0034b73d9e8","07450b41-8eb1-40a4-ba76-7fe3d0bad11e","878c262d-ce34-4cf4-8cf5-46f96abf3c62","bf202bc7-b3e4-45a5-8c7f-6b441f75c893","a186d422-fc7f-4fc3-a4ca-e647f50da58f","770049f4-9a27-4ea8-9dab-e4c9e05fd3df","e6f74cfc-dff4-4c43-a636-b228e18a3a97","0d78107e-e91e-41c3-be6b-a611b4cad012","4066a9d9-d39a-4e2e-b4a9-b1d0bf5b0ae2","7d07234c-70df-4ac7-be3b-7ab7cbadb0bd","d2fb1f6f-d084-4a56-a852-88e514ec2f96","00a4c07a-019e-4d58-a2c7-9c07f581b4d6","6905705c-7b46-4034-9b82-cfe5118e1438","6da9f7ff-e9a8-4d24-8c00-650f3362b519","9f9a09f4-f081-416a-a3a4-1b5592a1a92f","00656a9e-7822-4f9a-9ff8-e38340919664","69d4446a-8bc6-45a9-a37f-bc7508a757a6","808aed8c-648e-4e42-9636-51b4df155aa2","7a47c8f7-5fee-4a1d-97f4-2a67675105cd","d85dbf12-87f6-4470-8cd5-c52e95160f79","df913fe8-bb69-474f-9986-e270f7387bff","35657720-0465-4437-a44e-582e8899b1ae","72aecab7-7381-4908-b176-00bc52fc7b8e","c9d58a0b-2e42-4fa5-ae1c-34039d447468","1039af82-a3ad-499c-9569-9e6714c8b99d","65702ef8-af9f-4397-985c-e0a3ed541282","d1080a4c-d07b-4c2b-9b32-8ed8ef1b2eab","5b64ccec-49a1-4051-b445-0f2b94108404","d6842011-6e59-4101-8f9d-3ade556be7b6","5586ef21-b117-43dc-bc05-646fc7d5c01c","14396fda-66a0-444f-a932-098575bf54f3","d5c51773-294a-499d-a880-f8088e6ac329","e3139f3d-5e7c-49ae-adb6-567d95d6577c","efbef34c-80c0-4a0f-9320-cbea1d15b19a","b8ecbee5-74e2-4964-b34d-c68ded362b88","b3e3f6b7-2b10-4e53-86f2-e7acd646979f","d546c056-d0a4-4a7f-8adf-88f850ef0cf1","8ab558f0-de03-4f91-ba96-09cebb50c7db","e8136dd2-4e00-41c3-889e-cbc3b891f266","d54cfb4c-1758-46d1-b88d-bd3a10615e9e","c9939893-d383-4a46-92a4-60f4ea49c4cb","45552ad7-ef93-4b7c-9999-83a3ab436e68","1b19b8d8-81ca-4563-bb2c-06a3847c5e30","82cbbf38-711f-4901-984d-13d753b557aa","e0419f4d-1aa2-47e4-8f8d-d58793a74aba","da335f45-812e-4c5b-b8b4-b04971e5e62e","149afdef-c32a-441d-9e72-568db9c876a2","5b22c7f5-9b5d-4f7d-a550-f704d1f80ca7","95c187b1-72ca-4b83-b65e-04e1c2f87065","3bf7dd44-a994-4695-8160-2187aa96de43","4b4d0fd2-9b1b-44ef-938a-d30e0d8b27a3","1529c521-221f-4a65-9d29-3df739c6f0f6","57051ea6-55fb-4d29-abea-d77e65779441","227226f8-13f5-416d-a5bb-ba9bc4758399","37ec93e3-0cf2-447e-85a8-c2e52ce68c7a","49367843-2fa4-46c0-ba27-bd3e6313b420","24f1119b-a57b-472d-a85f-c9658a7de5de","e6877dfd-c057-438f-9668-0ce3f6d1bbf7","c2493328-4d0b-4d9f-8c60-66982e683082","39f3ec14-0de5-4afb-a1d9-a96d0843434f","8cbd8c1e-996f-4e9f-9dfe-0d3ae154f73e","e9c98b24-1661-4664-a163-b4dcc8d9c0ec","edc153af-8460-4aa7-9fe3-8a6978bae3f5","2e641dd2-35bb-4598-8c31-81401d7e9afb","5e63c2d6-cd12-4cfb-8699-9fc91e3bde07","28899e2c-50b5-417a-a5fa-34a3a4cd9420","f1ee73fe-2a6f-48cd-a072-16475015b1f1","0c02f2f5-23ef-4e54-ac59-b7967144228b","133847bd-7ff4-4bc6-86cc-457ee9a05202","04eec5c9-993e-4bd4-bcc4-3b6ee215af5d","10a59733-f2b5-460e-ae95-1f4beebb027c","9e7e8e8f-0710-4dd9-89dc-02000e511491","b3feac14-587a-402f-a6b8-6c8179e36a17","704fdef1-9bd8-415d-864d-61bb5ac437ac","26d5982b-c94d-4c6d-bf22-9c77f9a7b74f","a4867322-32e0-4e36-b905-1993697dfab9","51eef003-c8f7-4d34-83b3-3213ebf8c64c","f1664bd7-5d22-4716-9ea7-499d4b11c360","9fd3bcc3-4acf-4ab9-be22-42dc345f88d5","c00183ea-d1ee-440a-a28b-05226cf4560a","3b9bc7f3-8595-4a0a-94f4-2e5e43824174","709a1bdb-b324-4613-b003-aa7189492feb","ab1935a3-0bd7-41c4-9a05-737d86529c09","c38c7438-b071-4f3d-bc73-197926deec1f","708c202b-706f-42c0-93d6-b3bc382b3696","64899eb5-c516-4955-a778-2d5459b088cb","d97ec029-35b5-4295-a2d2-de65e06b238d","b14192d6-c9eb-4463-af9f-09b9a19ccc65","891db101-ab46-4b3a-b072-35ed3f1b3cd8","e549cd66-42b4-4102-8d16-c004f6c8b5c1","62b94673-edfa-4d83-89b4-e9b8b0857dff"],"Emergency":false}