 Jonhnathan
|
4adf092a25
|
Update win_workflow_compiler.yml
|
2020-10-15 20:00:57 -03:00 |
|
|
Jonhnathan
|
eb9bac761f
|
Update win_wmi_spwns_powershell.yml
|
2020-10-15 20:00:44 -03:00 |
|
|
Jonhnathan
|
b2e1b857ae
|
Update win_wmi_backdoor_exchange_transport_agent.yml
|
2020-10-15 20:00:27 -03:00 |
|
|
Jonhnathan
|
86ad1f45f5
|
Update win_win10_sched_task_0day.yml
|
2020-10-15 20:00:13 -03:00 |
|
|
Jonhnathan
|
630e92f3c2
|
Update win_webshell_spawn.yml
|
2020-10-15 19:59:59 -03:00 |
|
|
Jonhnathan
|
138b8fed06
|
Update win_webshell_recon_detection.yml
|
2020-10-15 19:59:36 -03:00 |
|
|
Jonhnathan
|
e402356e82
|
Update win_webshell_detection.yml
|
2020-10-15 19:58:37 -03:00 |
|
|
Jonhnathan
|
2d9233d418
|
Update win_vul_java_remote_debugging.yml
|
2020-10-15 19:57:43 -03:00 |
|
|
Jonhnathan
|
d9afa1aec6
|
Update win_termserv_proc_spawn.yml
|
2020-10-15 19:57:05 -03:00 |
|
|
Jonhnathan
|
737fbd1619
|
Update win_system_exe_anomaly.yml
|
2020-10-15 19:55:57 -03:00 |
|
|
Jonhnathan
|
434c6257f0
|
Update win_susp_wmi_execution.yml
|
2020-10-15 19:52:25 -03:00 |
|
|
Jonhnathan
|
7b9ec4709f
|
Update win_susp_whoami.yml
|
2020-10-15 19:51:55 -03:00 |
|
|
Jonhnathan
|
d09dd70695
|
Update win_susp_userinit_child.yml
|
2020-10-15 19:51:42 -03:00 |
|
|
Jonhnathan
|
ad8620f729
|
Update win_susp_tscon_rdp_redirect.yml
|
2020-10-15 19:51:05 -03:00 |
|
|
Jonhnathan
|
c38ccefc21
|
Update win_susp_tscon_localsystem.yml
|
2020-10-15 19:50:14 -03:00 |
|
|
Jonhnathan
|
9d8116c486
|
Update win_susp_taskmgr_parent.yml
|
2020-10-15 19:50:04 -03:00 |
|
|
Jonhnathan
|
dde03e760b
|
Update win_susp_taskmgr_localsystem.yml
|
2020-10-15 19:49:47 -03:00 |
|
|
Jonhnathan
|
4543e18e4e
|
Update win_susp_sysvol_access.yml
|
2020-10-15 19:49:31 -03:00 |
|
|
Jonhnathan
|
08a018a2ee
|
Update win_susp_sysprep_appdata.yml
|
2020-10-15 19:49:12 -03:00 |
|
|
Jonhnathan
|
4c9124952e
|
Update win_susp_svchost.yml
|
2020-10-15 19:47:47 -03:00 |
|
|
Jonhnathan
|
5c7bc4c48a
|
Update win_susp_schtask_creation.yml
|
2020-10-15 19:47:15 -03:00 |
|
|
Jonhnathan
|
d3f0d25ffb
|
Update win_susp_rundll32_by_ordinal.yml
|
2020-10-15 19:46:54 -03:00 |
|
|
Jonhnathan
|
8d471775e0
|
Update win_susp_regsvr32_anomalies.yml
|
2020-10-15 19:45:08 -03:00 |
|
|
Jonhnathan
|
cc338507c9
|
Update win_susp_ps_appdata.yml
|
2020-10-15 19:43:37 -03:00 |
|
|
Jonhnathan
|
91fb5cdcd0
|
Update win_susp_prog_location_process_starts.yml
|
2020-10-15 19:43:19 -03:00 |
|
|
Jonhnathan
|
253014ee68
|
Update win_susp_procdump.yml
|
2020-10-15 19:42:48 -03:00 |
|
|
Jonhnathan
|
f614ac658f
|
Update win_susp_powershell_parent_combo.yml
|
2020-10-15 19:42:20 -03:00 |
|
|
Jonhnathan
|
1feba3a12c
|
Update win_susp_powershell_hidden_b64_cmd.yml
|
2020-10-15 19:40:23 -03:00 |
|
|
Jonhnathan
|
7df7d7f48b
|
Update win_susp_powershell_enc_cmd.yml
|
2020-10-15 19:39:11 -03:00 |
|
|
Jonhnathan
|
610ae5ddd7
|
Update win_susp_powershell_enc_cmd.yml
|
2020-10-15 19:38:47 -03:00 |
|
|
Jonhnathan
|
4485436957
|
Update win_susp_powershell_empire_uac_bypass.yml
|
2020-10-15 19:34:18 -03:00 |
|
|
Jonhnathan
|
90d20094ac
|
Update win_susp_ping_hex_ip.yml
|
2020-10-15 19:34:00 -03:00 |
|
|
Jonhnathan
|
6bb9f1b3c9
|
Update win_susp_outlook_temp.yml
|
2020-10-15 19:33:45 -03:00 |
|
|
Jonhnathan
|
60f867b989
|
Update win_susp_outlook.yml
|
2020-10-15 19:33:33 -03:00 |
|
|
Jonhnathan
|
98ebb4965d
|
Update win_susp_ntdsutil.yml
|
2020-10-15 19:33:10 -03:00 |
|
|
Jonhnathan
|
ec9f9fd929
|
Update win_susp_net_execution.yml
|
2020-10-15 19:32:29 -03:00 |
|
|
Jonhnathan
|
6cd49220ad
|
Update win_susp_msiexec_web_install.yml
|
2020-10-15 19:31:44 -03:00 |
|
|
Jonhnathan
|
e8477c8afa
|
Update win_susp_msiexec_cwd.yml
|
2020-10-15 19:31:27 -03:00 |
|
|
Jonhnathan
|
0e1ae89a5c
|
Update win_susp_iss_module_install.yml
|
2020-10-15 19:30:56 -03:00 |
|
|
Jonhnathan
|
cd6149bcc3
|
Update win_susp_gup.yml
|
2020-10-15 19:30:43 -03:00 |
|
|
Jonhnathan
|
985f56c0e9
|
Update win_susp_findstr_lnk.yml
|
2020-10-15 19:30:21 -03:00 |
|
|
Jonhnathan
|
ab7bdf6af5
|
Update win_susp_file_characteristics.yml
|
2020-10-15 19:30:07 -03:00 |
|
|
Jonhnathan
|
ee8edb1e15
|
Update win_susp_execution_path_webserver.yml
|
2020-10-15 19:29:46 -03:00 |
|
|
Jonhnathan
|
fedc5b88e0
|
Update win_susp_execution_path.yml
|
2020-10-15 19:29:05 -03:00 |
|
|
Jonhnathan
|
9ef41cbc77
|
Update win_susp_exec_folder.yml
|
2020-10-15 19:28:23 -03:00 |
|
|
Jonhnathan
|
f33f7010fa
|
Update win_susp_double_extension.yml
|
2020-10-15 19:27:17 -03:00 |
|
|
Jonhnathan
|
92966098b9
|
Update win_susp_csc_folder.yml
|
2020-10-15 19:25:38 -03:00 |
|
|
Jonhnathan
|
bc042b5764
|
Update win_susp_csc.yml
|
2020-10-15 19:24:30 -03:00 |
|
|
Jonhnathan
|
5f4df56247
|
Update win_susp_crackmapexec_execution.yml
|
2020-10-15 19:23:58 -03:00 |
|
|
Jonhnathan
|
30601ab134
|
Update win_susp_copy_lateral_movement.yml
|
2020-10-15 19:22:49 -03:00 |
|