Logo
Explore Help
Sign In
security-tools/blue-team-tools
1
0
Fork 0
You've already forked blue-team-tools
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
1682bdb8a8fa96be9525a2518ae3a7a316ebcf07
blue-team-tools/rules/windows/powershell/powershell_classic
T
History
Florian Roth 921d46ca79 fix: FPs noticed with Aurora
2022-02-21 18:43:18 +01:00
..
posh_pc_alternate_powershell_hosts.yml
fix: FPs noticed with Aurora
2022-02-21 18:43:18 +01:00
posh_pc_delete_volume_shadow_copies.yml
Rename powershell_classic
2022-01-15 10:30:03 +01:00
posh_pc_downgrade_attack.yml
remove invalid tag
2022-01-19 18:23:30 +01:00
posh_pc_exe_calling_ps.yml
remove invalid tag
2022-01-19 18:23:30 +01:00
posh_pc_powercat.yml
Rename powershell_classic
2022-01-15 10:30:03 +01:00
posh_pc_remote_powershell_session.yml
remove invalid tag
2022-01-19 18:23:30 +01:00
posh_pc_renamed_powershell.yml
remove invalid tag
2022-01-19 18:23:30 +01:00
posh_pc_susp_athremotefxvgpudisablementcommand.yml
Rename powershell_classic
2022-01-15 10:30:03 +01:00
posh_pc_susp_get_nettcpconnection.yml
Rename powershell_classic
2022-01-15 10:30:03 +01:00
posh_pc_susp_zip_compress.yml
Rename powershell_classic
2022-01-15 10:30:03 +01:00
posh_pc_suspicious_download.yml
remove invalid tag
2022-01-19 18:23:30 +01:00
posh_pc_tamper_with_windows_defender.yml
Rename powershell_classic
2022-01-15 10:30:03 +01:00
posh_pc_wsman_com_provider_no_powershell.yml
Rename powershell_classic
2022-01-15 10:30:03 +01:00
posh_pc_xor_commandline.yml
remove invalid tag
2022-01-19 18:23:30 +01:00
Powered by Gitea Version: 1.26.1 Page: 31ms Template: 5ms
Auto
English
Bahasa Indonesia Deutsch English Español Français Gaeilge Italiano Latviešu Magyar nyelv Nederlands Polski Português de Portugal Português do Brasil Suomi Svenska Türkçe Čeština Ελληνικά Български Русский Українська فارسی മലയാളം 日本語 简体中文 繁體中文(台灣) 繁體中文(香港) 한국어
Licenses API