Paul Hager 0420e9c3bb feat: various new hktl rules

2023-04-17 12:08:30 +02:00

..

posh_pm_active_directory_module_dll_import.yml

chore: add nextron authors tag

2023-02-01 11:14:59 +01:00

posh_pm_alternate_powershell_hosts.yml

feat: updates and enhancements

2023-01-04 17:49:32 +01:00

posh_pm_bad_opsec_artifacts.yml

feat: updates and enhancements

2023-01-04 17:49:32 +01:00

posh_pm_clear_powershell_history.yml

feat: updates and enhancements

2023-01-04 17:49:32 +01:00

posh_pm_decompress_commands.yml

fix: resolves #4015

2023-02-07 14:33:56 +01:00

posh_pm_exploit_scripts.yml

fix: fp found in testing

2023-01-24 16:51:37 +01:00

posh_pm_get_addbaccount.yml

chore: add nextron authors tag

2023-02-01 11:14:59 +01:00

posh_pm_get_clipboard.yml

fix: resolves #4015

2023-02-07 14:33:56 +01:00

posh_pm_invoke_obfuscation_clip.yml

feat: updates and enhancements

2023-01-04 17:49:32 +01:00

posh_pm_invoke_obfuscation_obfuscated_iex.yml

feat: updates and enhancements

2023-01-04 17:49:32 +01:00

posh_pm_invoke_obfuscation_stdin.yml

feat: updates and enhancements

2023-01-04 17:49:32 +01:00

posh_pm_invoke_obfuscation_var.yml

feat: updates and enhancements

2023-01-04 17:49:32 +01:00

posh_pm_invoke_obfuscation_via_compress.yml

feat: updates and enhancements

2023-01-04 17:49:32 +01:00

posh_pm_invoke_obfuscation_via_rundll.yml

feat: updates and enhancements

2023-01-04 17:49:32 +01:00

posh_pm_invoke_obfuscation_via_stdin.yml

feat: updates and enhancements

2023-01-04 17:49:32 +01:00

posh_pm_invoke_obfuscation_via_use_clip.yml

feat: updates and enhancements

2023-01-04 17:49:32 +01:00

posh_pm_invoke_obfuscation_via_use_mhsta.yml

fix: small typos

2023-01-04 17:51:34 +01:00

posh_pm_invoke_obfuscation_via_use_rundll32.yml

feat: updates and enhancements

2023-01-04 17:49:32 +01:00

posh_pm_invoke_obfuscation_via_var.yml

feat: updates and enhancements

2023-01-04 17:49:32 +01:00

posh_pm_malicious_commandlets.yml

feat: various new hktl rules

2023-04-17 12:08:30 +02:00

posh_pm_remote_powershell_session.yml

fix: resolves #4015

2023-02-07 14:33:56 +01:00

posh_pm_susp_ad_group_reco.yml

feat: update and merge some pwsh rules

2023-01-20 17:07:23 +01:00

posh_pm_susp_athremotefxvgpudisablementcommand.yml

fix: small typos

2023-01-04 17:51:34 +01:00

posh_pm_susp_download.yml

chore: add nextron authors tag

2023-02-01 11:14:59 +01:00

posh_pm_susp_get_nettcpconnection.yml

feat: updates and enhancements

2023-01-04 17:49:32 +01:00

posh_pm_susp_invocation_generic.yml

chore: add nextron authors tag

2023-02-01 11:14:59 +01:00

posh_pm_susp_invocation_specific.yml

chore: add nextron authors tag

2023-02-01 11:14:59 +01:00

posh_pm_susp_local_group_reco.yml

feat: updates and enhancements

2023-01-04 17:49:32 +01:00

posh_pm_susp_reset_computermachinepassword.yml

change status to test

2023-01-27 06:48:34 +01:00

posh_pm_susp_smb_share_reco.yml

feat: updates and enhancements

2023-01-04 17:49:32 +01:00

posh_pm_susp_zip_compress.yml

feat: updates and enhancements

2023-01-04 17:49:32 +01:00

posh_pm_syncappvpublishingserver_exe.yml

feat: updates and enhancements

2023-01-04 17:49:32 +01:00