blue-team-tools

Files

T

Florian Roth 0cb8d0e091 Merge PR #5063 from @Neo23x0 - Add & Update rules related to the suspicious creation of ".rdp" files

new: .RDP File Created by Outlook Process
update: .RDP File Created By Uncommon Application - Add `olk.exe` to cover the new version of outlook 

---------

Co-authored-by: nasbench <8741929+nasbench@users.noreply.github.com>

2024-11-01 10:47:36 +01:00

application

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

category

Merge PR #5040 from @ruppde - Update Antivirus Password Dumper Detection

2024-10-08 23:04:44 +02:00

cloud

Merge PR #4991 from @nasbench - Promote older rules status from experimental to test

2024-09-02 10:01:36 +02:00

compliance

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

linux

Merge PR #5039 from @CheraghiMilad - Update Local System Accounts Discovery - Linux

2024-10-08 22:09:13 +02:00

macos

Merge PR #5065 from @nasbench - Promote older rules status from experimental to test

2024-11-01 10:21:04 +01:00

network

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

web

Merge PR #5027 from @nasbench - Promote older rules status from experimental to test

2024-10-01 14:56:09 +02:00

windows

Merge PR #5063 from @Neo23x0 - Add & Update rules related to the suspicious creation of ".rdp" files

2024-11-01 10:47:36 +01:00

README.md

chore: move more rules

2023-04-21 15:01:48 +02:00

README.md

TBD