security-tools/blue-team-tools
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge pull request #3700 from jstnk9/master

Browse Source 
Update rpc_firewall_eventlog_recon.yml
This commit is contained in:
Florian Roth
2022-11-16 08:55:49 +01:00
committed by GitHub
parent ec66833765 9ec8d40b42
commit eefa2da8b4
1 changed files with 0 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
rules/application/rpc_firewall/rpc_firewall_eventlog_recon.yml
-1
View File
@@ -5,7 +5,6 @@ description: Detects remote RPC calls to get event log information via EVEN or E
references:
- https://attack.mitre.org/tactics/TA0007/
- https://github.com/zeronetworks/rpcfirewall
- https://github.com/zeronetworks/rpcfirewall
- https://zeronetworks.com/blog/stopping_lateral_movement_via_the_rpc_firewall/
author: Sagie Dulce, Dekel Paz
date: 2022/01/01