 Alejandro Ortuno
|
c83d5a3d65
|
Added some minor tuning of ip ranges
|
2020-10-26 09:45:13 +01:00 |
|
|
S.kiran kumar
|
708fe7f8fa
|
Update silenttrinity_stager_msbuild_activity.yml
|
2020-10-26 14:13:33 +05:30 |
|
|
S.kiran kumar
|
630365cb4b
|
Update silenttrinity_stager_msbuild_activity.yml
|
2020-10-26 14:13:11 +05:30 |
|
|
S.kiran kumar
|
6c5bb72491
|
Update silenttrinity_stager_msbuild_activity.yml
|
2020-10-26 12:28:04 +05:30 |
|
|
S.kiran kumar
|
d7e9a87feb
|
Update silenttrinity_stager_msbuild_activity.yml
|
2020-10-26 12:10:46 +05:30 |
|
|
S.kiran kumar
|
02ce1196c3
|
Update silenttrinity_stager_msbuild_activity.yml
|
2020-10-26 11:58:32 +05:30 |
|
|
S.kiran kumar
|
2469ad14d8
|
Update silenttrinity_stager_msbuild_activity.yml
|
2020-10-26 11:47:21 +05:30 |
|
|
omkargudhate22
|
df07d53fea
|
formatting values
|
2020-10-25 18:23:29 +05:30 |
|
|
omkargudhate22
|
06890ba28b
|
update title
|
2020-10-25 15:10:12 +05:30 |
|
|
omkar72
|
021842eaa3
|
office test reg
|
2020-10-25 12:36:08 +05:30 |
|
|
omkar72
|
42de51cadc
|
conhost executions
|
2020-10-25 12:33:59 +05:30 |
|
|
S.kiran kumar
|
15a6352da6
|
Removed event ID
|
2020-10-24 17:40:29 +05:30 |
|
|
invrep-de
|
e5567631eb
|
Minor changes to incorporate feedback
Incorporated feedback from @yugoslavskiy. Thank you!
|
2020-10-24 07:27:59 -04:00 |
|
|
Florian Roth
|
75637324e0
|
feat: cover newest emotet campaigns
|
2020-10-23 23:44:48 +02:00 |
|
|
invrep-de
|
d623685c2c
|
[OSCD] Bad Opsec Sacrificial Processes Argument Discrepancy
|
2020-10-23 23:27:52 +02:00 |
|
|
stvetro
|
f27a7832ad
|
Small fix
Added "\" at file path end
Optimised exclusion of empty cmds
|
2020-10-23 13:25:32 +04:00 |
|
|
stvetro
|
ca6a4beb65
|
Small fix
Added "\" at file path end
|
2020-10-23 12:50:27 +04:00 |
|
|
stvetro
|
d7709d2236
|
Small fix
Add "\" to file path end
|
2020-10-23 12:44:46 +04:00 |
|
|
stvetro
|
f7a110e107
|
Small fix
Removed extra line;
Added "\" to file path end
|
2020-10-23 12:41:39 +04:00 |
|
|
stvetro
|
9d286b4d47
|
Deleted not my rule
Was added by mistake =)
|
2020-10-23 12:38:13 +04:00 |
|
|
Alejandro Ortuno
|
11df6c2566
|
Sigma rule
|
2020-10-23 10:16:59 +02:00 |
|
|
Vasiliy Burov
|
093941778b
|
Update and rename win_susp_multiple_files_renamed.yml to win_susp_multiple_files_renamed_or_deleted.yml
|
2020-10-22 15:57:29 +03:00 |
|
|
Alejandro Ortuno
|
638fd7eeab
|
Remote system discovery sigma rules for macos and linux
|
2020-10-22 10:37:29 +02:00 |
|
|
Alejandro Ortuno
|
5d37c0ee1e
|
Added some modifications to firewall disabling
|
2020-10-22 10:22:00 +02:00 |
|
|
Ömer Günal
|
afe97c000c
|
Update lnx_system_info_discovery.yml
|
2020-10-21 21:48:43 +03:00 |
|
|
Ömer Günal
|
9f7244f019
|
Update lnx_system_info_discovery.yml
|
2020-10-21 21:45:23 +03:00 |
|
|
Ömer Günal
|
a2a1b20335
|
Update lnx_process_discovery.yml
|
2020-10-21 21:40:46 +03:00 |
|
|
Mikhail Larin
|
c938d917f1
|
additional processname fix
|
2020-10-21 18:32:50 +03:00 |
|
|
Mikhail Larin
|
13d84ac27b
|
rule logic fix
|
2020-10-21 18:32:02 +03:00 |
|
|
Mikhail Larin
|
c744a1cb47
|
fix rule logic
|
2020-10-21 18:29:06 +03:00 |
|
|
Mikhail Larin
|
7227ed0721
|
fix rule logic
|
2020-10-21 18:25:22 +03:00 |
|
|
S.kiran kumar
|
ca5e86c850
|
Update silenttrinity_stager_msbuild_activity.yml
|
2020-10-21 20:14:07 +05:30 |
|
|
S.kiran kumar
|
7db0351d6d
|
Update silenttrinity_stager_msbuild_activity.yml
|
2020-10-21 20:11:55 +05:30 |
|
|
S.kiran kumar
|
e474c26c90
|
Update silenttrinity_stager_msbuild_activity.yml
|
2020-10-21 20:07:31 +05:30 |
|
|
S.kiran kumar
|
e8611ca0a7
|
Update silenttrinity_stager_msbuild_activity.yml
|
2020-10-21 20:00:19 +05:30 |
|
|
S.kiran kumar
|
7ba3d7a9c8
|
Update silenttrinity_stager_msbuild_activity.yml
|
2020-10-21 19:58:13 +05:30 |
|
|
Alejandro Ortuno
|
5e5576a91b
|
Fix product
|
2020-10-21 10:13:28 +02:00 |
|
|
Alejandro Ortuno
|
aa416090e1
|
Initial sigma rule
|
2020-10-21 10:09:00 +02:00 |
|
|
Alejandro Ortuno
|
cdabf8e0e8
|
Sigma rules for network service scanning.
|
2020-10-21 09:41:40 +02:00 |
|
|
yugoslavskiy
|
f050cedf92
|
update syntax to re-run the test once more...
|
2020-10-20 21:17:59 +02:00 |
|
|
yugoslavskiy
|
ca4a0f7a72
|
shorten the titile to pass the test
|
2020-10-20 20:37:49 +02:00 |
|
|
yugoslavskiy
|
a96408b20a
|
add an empty line to re-run the test
|
2020-10-20 20:11:13 +02:00 |
|
|
S.kiran kumar
|
7fbaacabb0
|
Mitre attck tags chages
|
2020-10-20 23:20:34 +05:30 |
|
|
yugoslavskiy
|
81acc81d10
|
updated syntax a bit to re-run the test
|
2020-10-20 19:06:23 +02:00 |
|
|
yugoslavskiy
|
27baf472b8
|
add an empty line to re-run the test
|
2020-10-20 18:59:25 +02:00 |
|
|
Vasiliy Burov
|
3a2c1d213a
|
Update win_susp_multiple_files_renamed.yml
|
2020-10-20 19:25:31 +03:00 |
|
|
yugoslavskiy
|
6ec761d27b
|
update syntax a bit to re-run the test
|
2020-10-20 17:40:53 +02:00 |
|
|
yugoslavskiy
|
40f6d5e543
|
update syntax a bit to re-run the test
|
2020-10-20 17:39:04 +02:00 |
|
|
yugoslavskiy
|
585770faa3
|
update syntax a bit to re-run the test
|
2020-10-20 17:31:00 +02:00 |
|
|
yugoslavskiy
|
462c92e522
|
changes a syntax a bit to re-run the test
|
2020-10-20 17:10:20 +02:00 |
|