security-tools/blue-team-tools
1
0
Fork 0
Code Issues Pull Requests Actions 45 Packages Projects Releases Wiki Activity

Merge PR #5230 from @nasbench - Archive new rule references and update cache file

Browse Source 
Co-authored-by: nasbench <nasbench@users.noreply.github.com>
This commit is contained in:
github-actions[bot]
2025-03-16 03:08:28 +01:00
committed by GitHub
parent 3ce034bb20
commit 4a3cb8b774
2 changed files with 480 additions and 474 deletions
Download Patch File Download Diff File Expand all files Collapse all files
tests/rule-references.txt
+18
View File
@@ -3993,3 +3993,21 @@ https://www.gradenegger.eu/en/details-of-the-event-with-id-53-of-the-source-micr
https://learn.microsoft.com/en-us/entra/id-protection/concept-identity-protection-risks#anonymous-ip-address
https://github.com/GhostPack/SharpDPAPI
https://web.archive.org/web/20230329155141/https://blog.menasec.net/2019/03/threat-hunting-26-remote-windows.html
https://learn.microsoft.com/en-us/entra/id-governance/privileged-identity-management/pim-how-to-configure-security-alerts#roles-are-being-assigned-outside-of-privileged-identity-management
https://learn.microsoft.com/en-us/windows-server/administration/windows-commands/chcp
https://confluence.atlassian.com/bitbucketserver/enable-ssh-access-to-git-repositories-776640358.html
https://learn.microsoft.com/en-us/windows/client-management/manage-recall
https://www.linkedin.com/feed/update/urn:li:activity:7282295814792605698/
https://learn.microsoft.com/en-us/powershell/module/storage/mount-diskimage?view=windowsserver2022-ps
https://asec.ahnlab.com/en/61000/
https://github.com/PwC-IR/Business-Email-Compromise-Guide/blob/fe29ce06aef842efe4eb448c26bbe822bf5b895d/PwC-Business_Email_Compromise-Guide.pdf
https://gtfobins.github.io/gtfobins/flock/#shell
https://www.datadoghq.com/blog/monitor-kubernetes-audit-logs/#monitor-api-authentication-issues
https://twitter.com/Kostastsale/status/1646256901506605063?s=20
https://adsecurity.org/?p=3513
https://blackpointcyber.com/resources/blog/breaking-through-the-screen/
https://twitter.com/TheDFIRReport/status/1482078434327244805
https://www.virustotal.com/gui/file/6f0f20da34396166df352bf301b3c59ef42b0bc67f52af3d541b0161c47ede05
https://learn.microsoft.com/en-us/dotnet/framework/tools/installutil-exe-installer-tool
https://research.nccgroup.com/2022/07/13/climbing-mount-everest-black-byte-bytes-back/
https://web.archive.org/web/20230329153811/https://blog.menasec.net/2019/02/threat-huting-10-impacketsecretdump.html