security-tools/blue-team-tools
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update known-FPs.csv

Browse Source
This commit is contained in:
Nasreddine Bencherchali
2022-10-04 11:41:17 +02:00
parent 098d530577
commit 48cb48306e
1 changed files with 1 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/known-FPs.csv
+1
View File
@@ -39,3 +39,4 @@ a96970af-f126-420d-90e1-d37bf25e50e1;Use Short Name Path in Image;unzip\.exe
349d891d-fef0-4fe4-bc53-eee623a15969;Use Short Name Path in Command Line;TeamViewer_\.exe
7a02e22e-b885-4404-b38b-1ddc7e65258a;Suspicious Schtasks Schedule Type;TeamViewer_\.exe
949f1ffb-6e85-4f00-ae1e-c3c5b190d605;Explorer Process Tree Break;Computer: Agamemnon
fdbf0b9d-0182-4c43-893b-a1eaab92d085;Newly Registered Protocol Handler;.*
1 RuleId RuleName MatchString
39 349d891d-fef0-4fe4-bc53-eee623a15969 Use Short Name Path in Command Line TeamViewer_\.exe
40 7a02e22e-b885-4404-b38b-1ddc7e65258a Suspicious Schtasks Schedule Type TeamViewer_\.exe
41 949f1ffb-6e85-4f00-ae1e-c3c5b190d605 Explorer Process Tree Break Computer: Agamemnon
42 fdbf0b9d-0182-4c43-893b-a1eaab92d085 Newly Registered Protocol Handler .*