security-tools/blue-team-tools
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: add missing modified for deprecated rules

Browse Source
This commit is contained in:
Nasreddine Bencherchali
2023-01-30 21:04:46 +01:00
parent e6c155442f
commit c8cd7ea070
3 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
rules-deprecated/windows/proc_creation_win_powershell_base64_invoke_susp_cmdlets.yml
+1
View File
@@ -6,6 +6,7 @@ references:
- https://thedfirreport.com/2022/05/09/seo-poisoning-a-gootloader-story/
author: pH-T
date: 2022/05/31
modified: 2023/01/30
tags:
- attack.execution
- attack.t1059.001
rules-deprecated/windows/proc_creation_win_powershell_base64_listing_shadowcopy.yml
+1 -1
View File
@@ -6,7 +6,7 @@ references:
- https://github.com/Neo23x0/Raccine/blob/20a569fa21625086433dcce8bb2765d0ea08dcb6/yara/mal_revil.yar
author: Christian Burkard
date: 2022/03/01
modified: 2022/03/07
modified: 2023/01/30
tags:
- attack.execution
- attack.t1059.001
rules-deprecated/windows/proc_creation_win_powershell_xor_encoded_command.yml
+1 -1
View File
@@ -6,7 +6,7 @@ references:
- https://speakerdeck.com/heirhabarov/hunting-for-powershell-abuse?slide=65
author: Teymur Kheirkhabarov (idea), Vasiliy Burov (rule), oscd.community, Tim Shelton
date: 2022/07/06
modified: 2023/01/26
modified: 2023/01/30
tags:
- attack.defense_evasion
- attack.t1027