Logo
Explore Help
Sign In
security-tools/blue-team-tools
1
0
Fork 0
You've already forked blue-team-tools
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
143f5fe4e2ff3f164e38b2c0bcfae2ba8557162a
blue-team-tools/rules/windows/powershell/powershell_classic
T
History
Florian Roth 8012efa9b5 refactor: some adjustments
2022-03-04 16:34:15 +01:00
..
posh_pc_alternate_powershell_hosts.yml
fix: FPs noticed with Aurora
2022-02-21 18:43:18 +01:00
posh_pc_delete_volume_shadow_copies.yml
refactor: some adjustments
2022-03-04 16:34:15 +01:00
posh_pc_downgrade_attack.yml
remove invalid tag
2022-01-19 18:23:30 +01:00
posh_pc_exe_calling_ps.yml
remove invalid tag
2022-01-19 18:23:30 +01:00
posh_pc_powercat.yml
Rename powershell_classic
2022-01-15 10:30:03 +01:00
posh_pc_remote_powershell_session.yml
remove invalid tag
2022-01-19 18:23:30 +01:00
posh_pc_renamed_powershell.yml
remove invalid tag
2022-01-19 18:23:30 +01:00
posh_pc_susp_athremotefxvgpudisablementcommand.yml
Rename powershell_classic
2022-01-15 10:30:03 +01:00
posh_pc_susp_get_nettcpconnection.yml
Rename powershell_classic
2022-01-15 10:30:03 +01:00
posh_pc_susp_zip_compress.yml
Rename powershell_classic
2022-01-15 10:30:03 +01:00
posh_pc_suspicious_download.yml
remove invalid tag
2022-01-19 18:23:30 +01:00
posh_pc_tamper_with_windows_defender.yml
Rename powershell_classic
2022-01-15 10:30:03 +01:00
posh_pc_wsman_com_provider_no_powershell.yml
Rename powershell_classic
2022-01-15 10:30:03 +01:00
posh_pc_xor_commandline.yml
remove invalid tag
2022-01-19 18:23:30 +01:00
Powered by Gitea Version: 1.26.1 Page: 54ms Template: 8ms
Auto
English
Bahasa Indonesia Deutsch English Español Français Gaeilge Italiano Latviešu Magyar nyelv Nederlands Polski Português de Portugal Português do Brasil Suomi Svenska Türkçe Čeština Ελληνικά Български Русский Українська فارسی മലയാളം 日本語 简体中文 繁體中文(台灣) 繁體中文(香港) 한국어
Licenses API