UEBA 6.x rules

The following rules are modified for UEBA 6.x.

1. EBA: Web Device Using Lateral Movement Protocols on events, which are detected by the Local system
2. EBA: Multiple Hosts Communicating with Suspicious External IP on events which are detected by the Local system
3. EBA: Rare External Destination Access by Server on events which are detected by the Local system
4. EBA: Potential Port Scanning Behavior Detected on events which are detected by the Local system
5. EBA: Excessive Connection Attempts to High Risky Remote Access Ports on events which are detected by the Local system
6. EBA: Host Infection Pattern on events which are detected by the Local system
7. EBA: Potential Host Lateral Movement Detected on events which are detected by the Local system