 Tim Shelton
|
bd13c7b77b
|
fixing yaml formatting
|
2021-12-01 21:27:31 +00:00 |
|
|
Tim Shelton
|
1ebd75754f
|
omgosh fix err in syntax on this.... sooo sorry!
|
2021-12-01 21:15:41 +00:00 |
|
|
Tim Shelton
|
48a45b06eb
|
fixing format
|
2021-11-29 19:23:31 +00:00 |
|
|
Tim Shelton
|
f0c6dbdc84
|
adding amazon ec2 to list of false positives
|
2021-11-29 19:20:00 +00:00 |
|
|
frack113
|
010a988fe5
|
Merge pull request #2318 from austinsonger/clearing_windows_console_history.yml
clearing_windows_console_history.yml
|
2021-11-27 07:43:52 +01:00 |
|
|
Austin Songer
|
48d9aec318
|
Update powershell_clearing_windows_console_history.yml
|
2021-11-26 09:18:37 -06:00 |
|
|
Florian Roth
|
d91b925873
|
fix: FPs
|
2021-11-26 14:42:21 +01:00 |
|
|
Austin Songer
|
25df58702a
|
Update powershell_clearing_windows_console_history.yml
|
2021-11-25 19:08:55 -06:00 |
|
|
Austin Songer
|
a9ab7f4e13
|
Update powershell_clearing_windows_console_history.yml
|
2021-11-25 19:08:27 -06:00 |
|
|
Austin Songer
|
f8fd44d92a
|
Update powershell_clearing_windows_console_history.yml
|
2021-11-25 19:06:18 -06:00 |
|
|
Austin Songer
|
c3d5d1c231
|
clearing_windows_console_history.yml
|
2021-11-25 19:04:30 -06:00 |
|
|
frack113
|
ab663f9bcf
|
Add MITTRE Technique
|
2021-11-20 10:56:41 +01:00 |
|
|
frack113
|
1cfca93354
|
Missing status in rules (#2284)
* add missing status
|
2021-11-19 22:32:26 +01:00 |
|
|
frack113
|
9f7a027913
|
Fix category and EventID
|
2021-11-12 12:18:44 +01:00 |
|
|
Austin Songer
|
923391224a
|
Create powershell_azurehound_commands.yml
|
2021-10-23 18:27:36 -05:00 |
|
|
frack113
|
217ac5c9a3
|
Merge pull request #2170 from frack113/redcanary_T1564_003
add rule powershell_suspicious_windowstyle
|
2021-10-21 18:07:48 +02:00 |
|
|
frack113
|
a9bc26f37c
|
add powershell_suspicious_windowstyle
|
2021-10-20 13:57:24 +02:00 |
|
|
frack113
|
f9efc127de
|
add powershell_set_policies_to_unsecure_level
|
2021-10-20 12:58:43 +02:00 |
|
|
frack113
|
faa407dacc
|
cleanup list
|
2021-10-18 14:52:35 +02:00 |
|
|
frack113
|
0e1c156ddf
|
fix related
|
2021-10-18 14:26:06 +02:00 |
|
|
frack113
|
d866b10590
|
add ps_script verison
|
2021-10-18 14:13:29 +02:00 |
|
|
frack113
|
f6b0a89161
|
change to category: ps_script
|
2021-10-16 08:18:49 +02:00 |
|
|
Austin Songer
|
4e43fce629
|
Update powershell_windows_firewall_profile_disabled.yml
|
2021-10-13 07:01:04 -05:00 |
|
|
Austin Songer
|
40eed2ec59
|
Rename powershell_windows_firewall_disabled.yml to powershell_windows_firewall_profile_disabled.yml
|
2021-10-12 11:57:37 -05:00 |
|
|
Austin Songer
|
d273bc25ea
|
Create powershell_windows_firewall_disabled.yml
|
2021-10-12 11:56:37 -05:00 |
|
|
frack113
|
1337116d84
|
Cleanup selection name
|
2021-10-10 10:17:24 +02:00 |
|
|
frack113
|
5c68c42058
|
order powershell_script
|
2021-10-09 10:30:36 +02:00 |
|
|
frack113
|
77749510b7
|
fix yml
|
2021-10-09 10:01:40 +02:00 |
|
|
frack113
|
9b0f744f75
|
order powershell_script
|
2021-10-09 09:57:45 +02:00 |
|
|
frack113
|
0d04b469f7
|
order powershell_classic
|
2021-10-07 07:40:53 +02:00 |
|