security-tools/blue-team-tools
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Added UUIDs to rules

Browse Source
This commit is contained in:
Thomas Patzke
2019-11-12 23:12:27 +01:00
parent ca53e937d9
commit 0592cbb67a
372 changed files with 940 additions and 549 deletions
Download Patch File Download Diff File Expand all files Collapse all files
rules/windows/sysmon/sysmon_powershell_exploit_scripts.yml
+1
View File
@@ -1,4 +1,5 @@
title: Malicious PowerShell Commandlet Names
id: f331aa1f-8c53-4fc3-b083-cc159bc971cb
status: experimental
description: Detects the creation of known powershell scripts for exploitation
references: