blue-team-tools/rules/windows at 0ed153237ec79b6fe2341ced16e0c7543a6d6b53 - blue-team-tools - GreySec Git

security-tools/blue-team-tools

Files

T

History

yugoslavskiy 0ed153237e Merge pull request #1226 from stvetro/oscd-winword

[OSCD] - Force winword.exe to load DLL (LoLBin)

2021-01-06 00:23:52 +03:00

..

Merge pull request #1223 from zinint/1009-23-1

2021-01-06 00:23:33 +03:00

…

Update sysmon_susp_driver_load.yml

2020-11-19 22:56:34 -03:00

Merge pull request #1219 from ryanplasma/rplas-SIGMA-547-page-37

2021-01-06 00:22:57 +03:00

Merge pull request #1139 from omkar72/oscd-4

2021-01-05 23:17:25 +03:00

Remove additional backslash

2020-11-19 23:15:38 -03:00

network_connection

Remove additional backslash

2020-11-20 00:53:13 -03:00

Merge pull request #1166 from drdoc/oscd

2021-01-06 00:12:34 +03:00

Merge pull request #1223 from zinint/1009-23-1

2021-01-06 00:23:33 +03:00

Merge pull request #1077 from uchakin/oscd

2021-01-05 23:06:24 +03:00

process_creation

Merge pull request #1226 from stvetro/oscd-winword

2021-01-06 00:23:52 +03:00

Merge pull request #1211 from zipa-original/win_persistence_telemetry

2021-01-06 00:20:51 +03:00

Merge pull request #1179 from SanWieb/OSCD_regedit_3

2021-01-06 00:16:45 +03:00