frack113 01dc930c17 Change status for old rules

2021-11-27 11:33:14 +01:00

..

zeek_dce_rpc_domain_user_enumeration.yml

restore src_ip for coverage

2021-11-14 10:11:29 +01:00

zeek_dce_rpc_mitre_bzar_execution.yml

Change status for old rules

2021-11-27 11:33:14 +01:00

zeek_dce_rpc_mitre_bzar_persistence.yml

Change status for old rules

2021-11-27 11:33:14 +01:00

zeek_dce_rpc_potential_petit_potam_efs_rpc_call.yml

Missing status in rules (#2284)

2021-11-19 22:32:26 +01:00

zeek_dce_rpc_printnightmare_print_driver_install.yml

Add cve tags

2021-10-25 18:51:40 +02:00

zeek_dce_rpc_smb_spoolss_named_pipe.yml

Missing status in rules (#2284)

2021-11-19 22:32:26 +01:00

zeek_default_cobalt_strike_certificate.yml

Missing status in rules (#2284)

2021-11-19 22:32:26 +01:00

zeek_dns_mining_pools.yml

Missing status in rules (#2284)

2021-11-19 22:32:26 +01:00

zeek_dns_suspicious_zbit_flag.yml

Missing status in rules (#2284)

2021-11-19 22:32:26 +01:00

zeek_dns_torproxy.yml

Missing status in rules (#2284)

2021-11-19 22:32:26 +01:00

zeek_http_executable_download_from_webdav.yml

Change status for old rules

2021-11-27 11:33:14 +01:00

zeek_http_omigod_no_auth_rce.yml

Zeek detection for OMIGOD HTTP RCE

2021-09-20 12:26:01 -04:00

zeek_http_webdav_put_request.yml

Change status for old rules

2021-11-27 11:33:14 +01:00

zeek_rdp_public_listener.yml

Fix field name

2021-11-14 09:26:00 +01:00

zeek_smb_converted_win_atsvc_task.yml

Change status for old rules

2021-11-27 11:33:14 +01:00

zeek_smb_converted_win_impacket_secretdump.yml

Change status for old rules

2021-11-27 11:33:14 +01:00

zeek_smb_converted_win_lm_namedpipe.yml

Change status for old rules

2021-11-27 11:33:14 +01:00

zeek_smb_converted_win_susp_psexec.yml

Change status for old rules

2021-11-27 11:33:14 +01:00

zeek_smb_converted_win_susp_raccess_sensitive_fext.yml

Change status for old rules

2021-11-27 11:33:14 +01:00

zeek_smb_converted_win_transferring_files_with_credential_data.yml

Change status for old rules

2021-11-27 11:33:14 +01:00

zeek_susp_kerberos_rc4.yml

Change status for old rules

2021-11-27 11:33:14 +01:00