{
    "id": "c6835293-1427-40d2-8128-9a9f8dd0cbe6",
    "name": "[OOTB] UEBA package",
    "version": 1,
    "releasedAt": 1788248631406,
    "description": "Beta version.\nThe package is designed to detect abnormal behavior of an account or host in a corporate network. It builds adaptive models of normal behavior based on accumulated historical data (data collection lasts for a month, a period can be modified). These models are used to calculate statistical indicators that minimize false positives and effectively detect potentially suspicious deviations.\nData sources: Windows OS events, NetFlow, Cisco, Solar Proxy.\nNotes:\nCollection rules can be adapted to specific information security tools and event sources.\nFor maximum efficiency of the package, enrichment of events with DNS data is recommended.\nRules may affect the correlator performance.\nIt is recommended to use these rules on KUMA version 4.0 or higher",
    "localization": {
        "ru": {
            "description": "Beta версия пакета правил.\nПакет правил предназначен для выявление аномального поведения учетной записи или рабочей станции в корпоративной сети. Он строит адаптивные модели нормального поведения на основе накопленных исторических данных (сбор данных длится месяц или заданный период). Эти модели используются для расчета статистических показателей, минимизирующих ложные срабатывания и эффективно выявляющих потенциально опасные отклонения.\nИсточники данных: События ОС Windows, NetFlow, Cisco, Solar Proxy.\nПримечания:\nПравила сбора данных (collection rules) могут быть адаптированы под конкретные средства защиты информации и источники телеметрии.\nДля максимальной эффективности работы пакета критически важно обогащение событий данными DNS.\nПравила могут оказать воздействие на проиводительность коррелятора.\nРекомендуется использовать правила на KUMA версии 4.0 и выше"
        }
    },
    "resourceIds": [
        "00656a9e-7822-4f9a-9ff8-e38340919664",
        "00a4c07a-019e-4d58-a2c7-9c07f581b4d6",
        "02a3b7b3-b212-49fa-b2a1-41d00ea22aa6",
        "04213cfc-dc6d-422e-8f50-0372a46aa9a2",
        "04eec5c9-993e-4bd4-bcc4-3b6ee215af5d",
        "05ad3645-2b95-44bd-b2b0-a2dd61fe0a10",
        "07450b41-8eb1-40a4-ba76-7fe3d0bad11e",
        "08bacd83-0c3c-4641-a4e3-c84748850293",
        "097a4ba3-c6e1-4d6f-835b-d0034b73d9e8",
        "0b501563-a2fa-4f0c-a8ee-018ee297c471",
        "0c02f2f5-23ef-4e54-ac59-b7967144228b",
        "0d15e5dc-29ab-4bd1-bad3-70aa53d0efe9",
        "0d78107e-e91e-41c3-be6b-a611b4cad012",
        "1039af82-a3ad-499c-9569-9e6714c8b99d",
        "10a59733-f2b5-460e-ae95-1f4beebb027c",
        "1248227d-2fcc-478b-9d97-8a57c52a27c7",
        "126ab711-10aa-41a9-8dcd-5b6e440f18df",
        "12ed5baf-fa76-4c01-bce6-0182caf89967",
        "133847bd-7ff4-4bc6-86cc-457ee9a05202",
        "14396fda-66a0-444f-a932-098575bf54f3",
        "149afdef-c32a-441d-9e72-568db9c876a2",
        "1529c521-221f-4a65-9d29-3df739c6f0f6",
        "15b7ad91-0a66-4779-b9aa-800d89f8e0f3",
        "1883ae6d-0b42-4216-ba6d-6e198834bf0e",
        "19971b10-f536-4bfb-8fe2-23b6fc502c61",
        "1b19b8d8-81ca-4563-bb2c-06a3847c5e30",
        "1decfbba-0a9d-48d1-8418-7b81f7eb640a",
        "1e18bcf6-28eb-4880-ab51-a4942eac0eb9",
        "1e6274f4-c60a-4185-bbee-c354e22af0bb",
        "227226f8-13f5-416d-a5bb-ba9bc4758399",
        "22bb654c-db73-43f1-90c8-96745056de14",
        "23bbf916-affb-4aa5-9fed-037a870c36ea",
        "24f1119b-a57b-472d-a85f-c9658a7de5de",
        "26d5982b-c94d-4c6d-bf22-9c77f9a7b74f",
        "2770fe10-3c90-4f5d-b45d-c45ecaaf0279",
        "28899e2c-50b5-417a-a5fa-34a3a4cd9420",
        "2e641dd2-35bb-4598-8c31-81401d7e9afb",
        "2f3837b0-1eba-4d26-8667-0c727f4e96f0",
        "35657720-0465-4437-a44e-582e8899b1ae",
        "37ec93e3-0cf2-447e-85a8-c2e52ce68c7a",
        "39f3ec14-0de5-4afb-a1d9-a96d0843434f",
        "3b9bc7f3-8595-4a0a-94f4-2e5e43824174",
        "3bf7dd44-a994-4695-8160-2187aa96de43",
        "3dc49fd0-28c0-460c-b63b-f30a1c612e57",
        "3fb15bed-5e1e-4ccc-8fce-e2e70c5ea2a1",
        "40039dc7-c8c7-452d-9363-f217b74d6f74",
        "4059105d-c169-4313-8c0b-eece151e2959",
        "4066a9d9-d39a-4e2e-b4a9-b1d0bf5b0ae2",
        "4472fd1e-0e83-4138-bbbf-1cfce79bf289",
        "45552ad7-ef93-4b7c-9999-83a3ab436e68",
        "455d29c0-a2fb-46a9-b336-15ce84d25c2e",
        "45e06e39-a3b7-46e3-a87d-8709997c1063",
        "476a3f6d-f105-4c5c-8e7e-7d49b737a786",
        "4898db9e-5a68-4fee-bcbc-0be2093f8175",
        "49367843-2fa4-46c0-ba27-bd3e6313b420",
        "4b4d0fd2-9b1b-44ef-938a-d30e0d8b27a3",
        "4d9c5da6-a027-46a4-b9f3-462dda08d222",
        "51eef003-c8f7-4d34-83b3-3213ebf8c64c",
        "5586ef21-b117-43dc-bc05-646fc7d5c01c",
        "57051ea6-55fb-4d29-abea-d77e65779441",
        "579837ce-ba45-4293-a942-3ad0af328ff7",
        "580a2fa0-0e0f-4397-b8b7-dc93400be340",
        "597ba375-4d9f-4d15-9fc1-8096527fcbaa",
        "5ad1f55d-70ed-4704-a5be-80c60076f06a",
        "5b22c7f5-9b5d-4f7d-a550-f704d1f80ca7",
        "5b230f19-ccb7-4e24-9e27-b974ef95b8e6",
        "5b64ccec-49a1-4051-b445-0f2b94108404",
        "5e63c2d6-cd12-4cfb-8699-9fc91e3bde07",
        "5fc648ac-5503-40dd-981c-9739636b4391",
        "61e4f23a-6430-48fe-b7a5-8594139cf58e",
        "62b94673-edfa-4d83-89b4-e9b8b0857dff",
        "64899eb5-c516-4955-a778-2d5459b088cb",
        "65702ef8-af9f-4397-985c-e0a3ed541282",
        "671f9315-9624-4a3b-a2a4-721b40cf0fda",
        "6905705c-7b46-4034-9b82-cfe5118e1438",
        "69826fca-8d59-4e93-9f3a-325f67ece1e1",
        "69d4446a-8bc6-45a9-a37f-bc7508a757a6",
        "6d5c166a-ceae-4539-a516-c19ffdc3044e",
        "6da9f7ff-e9a8-4d24-8c00-650f3362b519",
        "704fdef1-9bd8-415d-864d-61bb5ac437ac",
        "708c202b-706f-42c0-93d6-b3bc382b3696",
        "709a1bdb-b324-4613-b003-aa7189492feb",
        "70f3ca26-956c-4dfd-9fb4-6a1f259c28eb",
        "72aecab7-7381-4908-b176-00bc52fc7b8e",
        "73ed95e4-4656-47a5-9abd-1e8300dc0725",
        "770049f4-9a27-4ea8-9dab-e4c9e05fd3df",
        "78992056-031c-4a7a-9cb5-c7dc35bdabdf",
        "7a47c8f7-5fee-4a1d-97f4-2a67675105cd",
        "7ab1b849-a6f5-4245-8b43-3f11ff776a87",
        "7d07234c-70df-4ac7-be3b-7ab7cbadb0bd",
        "7dd05181-4975-4b58-b774-89827d9c8c10",
        "807df55a-272e-427d-a0ab-f3344beb5bfe",
        "808aed8c-648e-4e42-9636-51b4df155aa2",
        "82cbbf38-711f-4901-984d-13d753b557aa",
        "878c262d-ce34-4cf4-8cf5-46f96abf3c62",
        "88019aae-872c-4118-b9cd-fffe7e611296",
        "891db101-ab46-4b3a-b072-35ed3f1b3cd8",
        "8ab558f0-de03-4f91-ba96-09cebb50c7db",
        "8cbd8c1e-996f-4e9f-9dfe-0d3ae154f73e",
        "8fc72685-4f7d-49a2-9f28-dd03f26eb945",
        "8fe49367-e77b-4c33-908a-8e6efdfbc9a1",
        "917e6804-7816-49e0-b2d9-1122d43864af",
        "94d6cd05-96c0-410e-9fd7-8a09d71c3d84",
        "95c187b1-72ca-4b83-b65e-04e1c2f87065",
        "96f1ada5-c2fc-4a81-9748-453a7aed6cb3",
        "9818e4a5-7e57-46bd-a40b-721cf35cda36",
        "9bfeec69-7c58-4075-96ae-b620172879d3",
        "9e663907-f458-41f5-8b6f-21a820e929e5",
        "9e7e8e8f-0710-4dd9-89dc-02000e511491",
        "9eaeafbf-8e19-4a9d-95f8-70c81e8f5b94",
        "9f9a09f4-f081-416a-a3a4-1b5592a1a92f",
        "9fd3bcc3-4acf-4ab9-be22-42dc345f88d5",
        "a08ad9ce-3c23-4a56-b674-74014f513f6f",
        "a17b0752-a25e-49d8-b755-ed93b21b079b",
        "a186d422-fc7f-4fc3-a4ca-e647f50da58f",
        "a4867322-32e0-4e36-b905-1993697dfab9",
        "a4b56bea-2bda-478f-94e2-cc8dea4e2baa",
        "aa145fad-2b4e-42c0-a2fa-26d4b06cd67f",
        "ab103018-40a5-4f92-9306-546afc74b471",
        "ab1935a3-0bd7-41c4-9a05-737d86529c09",
        "ab5dc2ac-6b76-4e77-bc08-143552a3f864",
        "b0469d54-9438-4ff9-82cc-f1244a3e91d7",
        "b14192d6-c9eb-4463-af9f-09b9a19ccc65",
        "b3e3f6b7-2b10-4e53-86f2-e7acd646979f",
        "b3feac14-587a-402f-a6b8-6c8179e36a17",
        "b4c88100-05b7-45f5-91d5-dbb9d9accbdd",
        "b8ecbee5-74e2-4964-b34d-c68ded362b88",
        "bb14ab12-8810-4383-b055-8c431d53420b",
        "bb360a7f-108d-4c3b-a648-b9aa9a0231c5",
        "bbbfbfa0-befe-48eb-97fe-cc1988b846b2",
        "bd86f810-0d66-453d-b91d-55404170b82a",
        "bf202bc7-b3e4-45a5-8c7f-6b441f75c893",
        "bfce58af-de5c-46ad-a0da-94efb1408052",
        "c00183ea-d1ee-440a-a28b-05226cf4560a",
        "c2493328-4d0b-4d9f-8c60-66982e683082",
        "c38c7438-b071-4f3d-bc73-197926deec1f",
        "c9939893-d383-4a46-92a4-60f4ea49c4cb",
        "c9bec293-192b-4edf-b0c7-ae807bb2e658",
        "c9d58a0b-2e42-4fa5-ae1c-34039d447468",
        "d09ab8af-76c9-40d9-8ce3-0c454f5a8b43",
        "d1080a4c-d07b-4c2b-9b32-8ed8ef1b2eab",
        "d2fb1f6f-d084-4a56-a852-88e514ec2f96",
        "d3936711-0b19-4282-996b-5e14f36153d8",
        "d546c056-d0a4-4a7f-8adf-88f850ef0cf1",
        "d54cfb4c-1758-46d1-b88d-bd3a10615e9e",
        "d5ad4647-3da7-485d-8169-d1e40b3f610d",
        "d5c51773-294a-499d-a880-f8088e6ac329",
        "d6294310-43e0-4bf2-8d2c-041aa01bcf63",
        "d6842011-6e59-4101-8f9d-3ade556be7b6",
        "d85dbf12-87f6-4470-8cd5-c52e95160f79",
        "d97ec029-35b5-4295-a2d2-de65e06b238d",
        "da335f45-812e-4c5b-b8b4-b04971e5e62e",
        "de879180-f927-4d30-96ac-fccea49e8f19",
        "dec9d8f5-e4b2-4853-9664-ee180d09107c",
        "df913fe8-bb69-474f-9986-e270f7387bff",
        "e0419f4d-1aa2-47e4-8f8d-d58793a74aba",
        "e3139f3d-5e7c-49ae-adb6-567d95d6577c",
        "e3fd8dc3-3eda-4639-8ab0-cc609bf8ed5b",
        "e549cd66-42b4-4102-8d16-c004f6c8b5c1",
        "e67a0862-f307-4c07-a13e-bee4978f932b",
        "e6877dfd-c057-438f-9668-0ce3f6d1bbf7",
        "e6f74cfc-dff4-4c43-a636-b228e18a3a97",
        "e8136dd2-4e00-41c3-889e-cbc3b891f266",
        "e9c98b24-1661-4664-a163-b4dcc8d9c0ec",
        "edc153af-8460-4aa7-9fe3-8a6978bae3f5",
        "efbef34c-80c0-4a0f-9320-cbea1d15b19a",
        "f0d8f0b7-1548-4e28-aff0-71e2791c8039",
        "f1664bd7-5d22-4716-9ea7-499d4b11c360",
        "f1ee73fe-2a6f-48cd-a072-16475015b1f1",
        "f2065d8a-dbba-41ff-918b-25b2997151b3",
        "f7408070-a1d0-4469-ab9d-9512e5650f92",
        "f8f596ff-19b5-4689-a1b8-ac4b40424297",
        "fd6e9eee-3f08-4a95-9646-9704996f3c4f"
    ],
    "emergency": false
}