reverting description

Azure · Feb 3, 2025 · 9e66850 · 9e66850
1 parent 70c9fe3
commit 9e66850
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 3 deletions.
diff --git a/Solutions/Salesforce Service Cloud/Analytic Rules/Salesforce-BruteForce.yaml b/Solutions/Salesforce Service Cloud/Analytic Rules/Salesforce-BruteForce.yaml
@@ -2,7 +2,7 @@ id: 5a6ce089-e756-40fb-b022-c8e8864a973a
 name: Brute force attack against user credentials
 description: |
   'Identifies evidence of brute force activity against a user based on multiple authentication failures and at least one successful authentication within a given time window. This query limits IPAddresses to 100 and may not potentially cover all IPAddresses.
-  The default failure threshold is 10, success threshold is 1, and the default time window is 1 Hour.'
+  The default failure threshold is 10, success threshold is 1, and the default time window is 20 minutes.'
 severity: Medium
 status: Available
 requiredDataConnectors:

diff --git a/Solutions/Salesforce Service Cloud/Analytic Rules/Salesforce-PasswordSpray.yaml b/Solutions/Salesforce Service Cloud/Analytic Rules/Salesforce-PasswordSpray.yaml
@@ -1,7 +1,7 @@
 id: 64d16e62-1a17-4a35-9ea7-2b9fe6f07118
 name: Potential Password Spray Attack
 description: |
-  'This query searches for failed attempts to log in from more than 15 various users within a 1 Hour timeframe from the same source. This is a potential indication of a password spray attack.'
+  'This query searches for failed attempts to log in from more than 15 various users within a 5 minutes timeframe from the same source. This is a potential indication of a password spray attack.'
 severity: Medium
 status: Available
 requiredDataConnectors:

diff --git a/Solutions/Salesforce Service Cloud/Analytic Rules/Salesforce-SigninsMultipleCountries.yaml b/Solutions/Salesforce Service Cloud/Analytic Rules/Salesforce-SigninsMultipleCountries.yaml
@@ -1,7 +1,7 @@
 id: 3094e036-e5ae-4d6e-8626-b0f86ebc71f2
 name: User Sign in from different countries
 description: |
-  'This query searches for successful user logins from different countries within 1 Hour.'
+  'This query searches for successful user logins from different countries within 30 mins.'
 severity: Medium
 status: Available
 requiredDataConnectors: