Logo
Explore Help
Sign In
security-tools/blue-team-tools
1
0
Fork 0
You've already forked blue-team-tools
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
0bbb679e38cdf553db2829d06cb859fe9b6ce2be
blue-team-tools/rules/windows
T
History
Florian Roth 0bbb679e38 fix: FPs with veam backup shell
2022-09-12 13:29:51 +02:00
..
builtin
Merge branch 'master' into aurora-false-positive-fixing
2022-09-05 16:57:10 +02:00
create_remote_thread
fix: FP found in testing environment
2022-08-29 16:58:12 +02:00
create_stream_hash
fix: duplicate UUIDs
2022-08-25 08:23:48 +02:00
dns_query
Added quotes to strings
2022-09-01 15:22:26 +02:00
driver_load
New+Update
2022-09-02 09:15:21 +02:00
file_access
System FP
2022-07-27 10:52:08 +02:00
file_change
Merge branch 'master' into aurora-false-positive-fixing
2022-09-05 16:57:10 +02:00
file_delete
…
file_event
Added quotes to strings
2022-09-01 15:22:26 +02:00
file_rename
Update file_rename_win_ransomware.yml
2022-08-31 16:08:12 +02:00
image_load
fix: too many FPs during Windows update - User empty
2022-09-11 16:28:04 +02:00
network_connection
Merge pull request #3459 from SigmaHQ/aurora-false-positive-fixing
2022-09-06 08:41:02 +02:00
pipe_created
rule: CsExec
2022-08-22 17:43:49 +02:00
powershell
fix: fixing multiple FPs with the use of VSCode
2022-09-10 11:42:44 +02:00
process_access
Added quotes to strings
2022-09-01 15:22:26 +02:00
process_creation
fix: FPs with veam backup shell
2022-09-12 13:29:51 +02:00
raw_access_thread
…
registry
Merge branch 'master' into aurora-false-positive-fixing
2022-09-05 16:57:10 +02:00
sysmon
Update Sysmon
2022-08-16 19:47:44 +01:00
wmi_event
…
Powered by Gitea Version: 1.26.1 Page: 1066ms Template: 15ms
Auto
English
Bahasa Indonesia Deutsch English Español Français Gaeilge Italiano Latviešu Magyar nyelv Nederlands Polski Português de Portugal Português do Brasil Suomi Svenska Türkçe Čeština Ελληνικά Български Русский Українська فارسی മലയാളം 日本語 简体中文 繁體中文(台灣) 繁體中文(香港) 한국어
Licenses API