aw350m3 399f378269 att&ck tags review: windows/powershell, windows/process_access, windows/network_connection

2020-08-24 23:31:26 +00:00

..

sysmon_dllhost_net_connections.yml

att&ck tags review: windows/powershell, windows/process_access, windows/network_connection

2020-08-24 23:31:26 +00:00

sysmon_malware_backconnect_ports.yml

att&ck tags review: windows/powershell, windows/process_access, windows/network_connection

2020-08-24 23:31:26 +00:00

sysmon_notepad_network_connection.yml

att&ck tags review: windows/powershell, windows/process_access, windows/network_connection

2020-08-24 23:31:26 +00:00

sysmon_powershell_network_connection.yml

att&ck tags review: windows/powershell, windows/process_access, windows/network_connection

2020-08-24 23:31:26 +00:00

sysmon_rdp_reverse_tunnel.yml

att&ck tags review: windows/powershell, windows/process_access, windows/network_connection

2020-08-24 23:31:26 +00:00

sysmon_regsvr32_network_activity.yml

att&ck tags review: windows/powershell, windows/process_access, windows/network_connection

2020-08-24 23:31:26 +00:00

sysmon_remote_powershell_session_network.yml

att&ck tags review: windows/powershell, windows/process_access, windows/network_connection

2020-08-24 23:31:26 +00:00

sysmon_rundll32_net_connections.yml

att&ck tags review: windows/powershell, windows/process_access, windows/network_connection

2020-08-24 23:31:26 +00:00

sysmon_susp_prog_location_network_connection.yml

att&ck tags review: windows/powershell, windows/process_access, windows/network_connection

2020-08-24 23:31:26 +00:00

sysmon_susp_rdp.yml

att&ck tags review: windows/powershell, windows/process_access, windows/network_connection

2020-08-24 23:31:26 +00:00

sysmon_suspicious_outbound_kerberos_connection.yml

att&ck tags review: windows/powershell, windows/process_access, windows/network_connection

2020-08-24 23:31:26 +00:00

sysmon_win_binary_github_com.yml

att&ck tags review: windows/powershell, windows/process_access, windows/network_connection

2020-08-24 23:31:26 +00:00

sysmon_win_binary_susp_com.yml

att&ck tags review: windows/powershell, windows/process_access, windows/network_connection

2020-08-24 23:31:26 +00:00