Logo
Explore Help
Sign In
security-tools/blue-team-tools
1
0
Fork 0
You've already forked blue-team-tools
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
06c168d9b2bd689debaac9d6ddef3aaa5fe6c86a
blue-team-tools/rules/windows
T
History
Florian Roth c3f891beab Merge pull request #1286 from V3T0/v3t0_oscd_lolbas_runonce_susp_persistence_
[OSCD] Added a rule to detect potential persistence using registry keys
2020-12-21 18:33:17 +01:00
..
builtin
Update win_susp_logon_explicit_credentials.yml
2020-10-16 00:50:29 +02:00
deprecated
fix: buggy rule
2020-05-23 18:32:02 +02:00
driver_load
att&ck tags review: windows/builtin, windows/driver_load, windows/file_event, windows/image_load, windows/other
2020-08-25 01:09:17 +02:00
file_event
Merge pull request #989 from oscd-initiative/master
2020-09-08 13:27:58 +02:00
image_load
Update sysmon_tttracer_mod_load.yml
2020-10-09 09:34:05 +03:00
malware
Further subtechnique updates
2020-06-17 11:31:40 -06:00
network_connection
added missing ATT&CK v6.3 IDs with comments and removed unnecessary "modified" attributes
2020-08-25 23:51:22 +00:00
other
Merge pull request #1007 from d4rk-d4nph3/master
2020-09-15 15:45:00 +02:00
powershell
Merge pull request #1060 from svch0stz/oscd6
2020-10-13 22:59:25 +02:00
process_access
fix typos, update tags
2020-09-13 15:46:45 +02:00
process_creation
Merge pull request #1262 from invrep-de/oscd
2020-12-21 18:30:21 +01:00
registry_event
[OSCD] Added a rule to detect potential persistence using registry keys
2020-11-15 19:04:12 -05:00
sysmon
Merge pull request #1065 from nsaddler/oscd1
2020-10-13 22:33:14 +02:00
Powered by Gitea Version: 1.26.1 Page: 232ms Template: 8ms
Auto
English
Bahasa Indonesia Deutsch English Español Français Gaeilge Italiano Latviešu Magyar nyelv Nederlands Polski Português de Portugal Português do Brasil Suomi Svenska Türkçe Čeština Ελληνικά Български Русский Українська فارسی മലയാളം 日本語 简体中文 繁體中文(台灣) 繁體中文(香港) 한국어
Licenses API