Logo
Explore Help
Sign In
security-tools/blue-team-tools
1
0
Fork 0
You've already forked blue-team-tools
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
15713918cd538fcdc2a713b73ae39b83e7694cdf
blue-team-tools/rules/windows
T
History
Nasreddine Bencherchali 15713918cd Rename
2022-09-08 10:26:23 +02:00
..
builtin
Merge branch 'master' into aurora-false-positive-fixing
2022-09-05 16:57:10 +02:00
create_remote_thread
fix: FP found in testing environment
2022-08-29 16:58:12 +02:00
create_stream_hash
Merge pull request #3468 from nasbench/nasbench-rule-devel
2022-09-08 06:29:36 +02:00
dns_query
Added quotes to strings
2022-09-01 15:22:26 +02:00
driver_load
New+Update
2022-09-02 09:15:21 +02:00
file_access
System FP
2022-07-27 10:52:08 +02:00
file_change
FIX: fixes missing string indicator. does not pass validate() check inside base.py
2022-09-06 13:11:37 +00:00
file_delete
…
file_event
Rename
2022-09-08 10:26:23 +02:00
file_rename
Update file_rename_win_ransomware.yml
2022-08-31 16:08:12 +02:00
image_load
fix: duplicate UUIDs
2022-09-07 17:12:12 +02:00
network_connection
Merge pull request #3459 from SigmaHQ/aurora-false-positive-fixing
2022-09-06 08:41:02 +02:00
pipe_created
rule: CsExec
2022-08-22 17:43:49 +02:00
powershell
Update posh_ps_adrecon_execution.yml
2022-09-06 17:19:46 +02:00
process_access
refactor: SysmonEnte, SharpEvtMute, SysmonQuiet
2022-09-07 16:01:05 +02:00
process_creation
Merge pull request #3474 from SigmaHQ/aurora-false-positive-fixing
2022-09-08 09:09:26 +02:00
raw_access_thread
…
registry
Fix FP in testing
2022-09-08 10:24:27 +02:00
sysmon
Update Sysmon
2022-08-16 19:47:44 +01:00
wmi_event
…
Powered by Gitea Version: 1.26.1 Page: 1174ms Template: 21ms
Auto
English
Bahasa Indonesia Deutsch English Español Français Gaeilge Italiano Latviešu Magyar nyelv Nederlands Polski Português de Portugal Português do Brasil Suomi Svenska Türkçe Čeština Ελληνικά Български Русский Українська فارسی മലയാളം 日本語 简体中文 繁體中文(台灣) 繁體中文(香港) 한국어
Licenses API