Jonhnathan
|
707fbe048e
|
Update win_apt_evilnum_jul20.yml
|
2020-11-26 23:05:08 -03:00 |
|
Jonhnathan
|
a113c0f3b4
|
Remove Additional backslash
|
2020-11-26 23:00:05 -03:00 |
|
Jonhnathan
|
d57d7c1e5b
|
Remove Additional backslash
|
2020-11-26 22:59:35 -03:00 |
|
Jonhnathan
|
f61317b2f9
|
Update sysmon_in_memory_assembly_execution.yml
|
2020-11-26 22:50:48 -03:00 |
|
Jonhnathan
|
784cab1dfe
|
Fix missing logic and Field
|
2020-11-26 22:46:17 -03:00 |
|
Jonhnathan
|
48f16a0ca8
|
Update win_susp_net_recon_activity.yml
|
2020-11-26 22:39:49 -03:00 |
|
Florian Roth
|
c6fc9de144
|
New Trickbot wermgr rule
|
2020-11-26 09:54:27 +01:00 |
|
Florian Roth
|
c111ab3141
|
Improved Trickbot recon rule
|
2020-11-26 09:54:13 +01:00 |
|
Florian Roth
|
b31ed47ccf
|
Merge branch 'master' into devel
|
2020-11-26 09:44:56 +01:00 |
|
Tim I
|
78d201ad15
|
Fix value modifier and add a slash
|
2020-11-24 23:06:21 +03:00 |
|
bczyz1
|
05398ae95e
|
change field newprocessname -> image
|
2020-11-23 13:43:19 +01:00 |
|
toffeebr33k
|
c8c4183678
|
Update aws_enum_listing.yml
|
2020-11-22 01:53:58 +08:00 |
|
toffeebr33k
|
3d0e1988c6
|
Update aws_enum_listing.yml
|
2020-11-22 01:41:20 +08:00 |
|
toffeebr33k
|
273590b151
|
Update aws_enum_listing.yml
|
2020-11-22 01:17:42 +08:00 |
|
toffeebr33k
|
52fca0fe3a
|
Update aws_enum_listing.yml
|
2020-11-22 01:05:56 +08:00 |
|
toffeebr33k
|
e764ca687a
|
Update aws_enum_listing.yml
|
2020-11-22 00:50:34 +08:00 |
|
toffeebr33k
|
00504ee186
|
Update aws_update_login_profile.yml
|
2020-11-22 00:42:25 +08:00 |
|
toffeebr33k
|
3dd1525b98
|
Update aws_update_login_profile.yml
|
2020-11-22 00:38:41 +08:00 |
|
toffeebr33k
|
6b65180464
|
Add files via upload
|
2020-11-22 00:33:47 +08:00 |
|
toffeebr33k
|
cff82ff79a
|
Delete aws_update_login_profile.yml
|
2020-11-22 00:33:17 +08:00 |
|
toffeebr33k
|
7e1c918b4d
|
Delete aws_enum_listing.yml
|
2020-11-22 00:32:59 +08:00 |
|
toffeebr33k
|
551764b630
|
Add files via upload
|
2020-11-22 00:26:17 +08:00 |
|
toffeebr33k
|
3dd25ddea4
|
Delete aws_update_login_profile.yml
|
2020-11-22 00:25:54 +08:00 |
|
toffeebr33k
|
fba9c12bb2
|
Delete aws_enum_listing.yml
|
2020-11-22 00:25:29 +08:00 |
|
toffeebr33k
|
6c1f3f5969
|
Update aws_update_login_profile.yml
|
2020-11-21 23:45:10 +08:00 |
|
toffeebr33k
|
70e725e82e
|
Update aws_enum_listing.yml
|
2020-11-21 23:44:14 +08:00 |
|
toffeebr33k
|
596d1b6e4c
|
Update aws_update_login_profile.yml
|
2020-11-21 23:29:49 +08:00 |
|
toffeebr33k
|
a786ebd04b
|
Update aws_enum_listing.yml
|
2020-11-21 23:28:57 +08:00 |
|
toffeebr33k
|
1ca903b168
|
Update aws_enum_listing.yml
|
2020-11-21 23:22:07 +08:00 |
|
toffeebr33k
|
7f61591865
|
Add files via upload
|
2020-11-21 23:12:50 +08:00 |
|
Alejandro Ortuno
|
000c038ede
|
Retrigger tests
|
2020-11-20 09:30:43 +01:00 |
|
Alejandro Ortuno
|
cfcda8d25f
|
Trigger new test execution
|
2020-11-20 09:29:09 +01:00 |
|
bczyz1
|
193021eff8
|
Update win_apt_slingshot.yml
fix condition
|
2020-11-20 09:19:03 +01:00 |
|
Jonhnathan
|
31e0cfb13f
|
Update win_susp_covenant.yml
|
2020-11-20 02:36:20 -03:00 |
|
Jonhnathan
|
ec1944e2d7
|
Update win_susp_copy_system32.yml
|
2020-11-20 02:31:26 -03:00 |
|
Jonhnathan
|
5d7131bbf2
|
Update win_susp_compression_params.yml
|
2020-11-20 02:29:41 -03:00 |
|
Jonhnathan
|
32ed588adb
|
Update detection Logic
|
2020-11-20 02:27:58 -03:00 |
|
Jonhnathan
|
b274be8d4e
|
Update detection Logic
|
2020-11-20 02:25:32 -03:00 |
|
Jonhnathan
|
c31c0d981a
|
Update detection logic
|
2020-11-20 02:23:18 -03:00 |
|
Jonhnathan
|
23edcc6dc6
|
Update win_susp_certutil_command.yml
|
2020-11-20 02:21:55 -03:00 |
|
Jonhnathan
|
8af17dda5b
|
Update win_spn_enum.yml
|
2020-11-20 02:17:31 -03:00 |
|
Jonhnathan
|
d5cb4246c2
|
Remove additional backlash
|
2020-11-20 02:16:51 -03:00 |
|
Jonhnathan
|
0606cd3dde
|
Update detection Logic
|
2020-11-20 02:10:27 -03:00 |
|
Jonhnathan
|
ebb4580378
|
Remove additional backlash
|
2020-11-20 02:04:28 -03:00 |
|
Jonhnathan
|
2ba146be07
|
Remove additional backlash
|
2020-11-20 02:03:06 -03:00 |
|
Jonhnathan
|
493fa3d5ee
|
Update sysmon_susp_mic_cam_access.yml
|
2020-11-20 02:02:26 -03:00 |
|
Jonhnathan
|
9e3a612953
|
Remove additional backlash
|
2020-11-20 02:01:43 -03:00 |
|
Jonhnathan
|
6c88dd700e
|
Update sysmon_stickykey_like_backdoor.yml
|
2020-11-20 02:00:53 -03:00 |
|
Jonhnathan
|
1e640b50f9
|
Remove additional backlash
|
2020-11-20 01:58:20 -03:00 |
|
Jonhnathan
|
acff5ef4f9
|
Update sysmon_registry_persistence_key_linking.yml
|
2020-11-20 01:57:34 -03:00 |
|