blue-team-tools

net_connection_win_binary_github_com.yml

Order yaml field

2022-10-26 09:42:26 +02:00

net_connection_win_binary_susp_com.yml

feat: update sharing websites

2023-01-19 22:07:31 +01:00

net_connection_win_certutil.yml

Order yaml field

2022-10-26 09:42:26 +02:00

net_connection_win_crypto_mining.yml

Order yaml field

2022-10-26 09:42:26 +02:00

net_connection_win_dead_drop_resolvers.yml

feat: update sharing websites

2023-01-19 22:07:31 +01:00

net_connection_win_dllhost_net_connections.yml

fix: fp found in testing

2023-01-18 18:41:07 +01:00

net_connection_win_eqnedt.yml

Order yaml field

2022-10-26 09:42:26 +02:00

net_connection_win_excel_outbound_network_connection.yml

Fix

2022-11-03 09:39:48 +01:00

net_connection_win_hh.yml

Order yaml field

2022-10-26 09:42:26 +02:00

net_connection_win_imewdbld.yml

Order yaml field

2022-10-26 09:42:26 +02:00

net_connection_win_malware_backconnect_ports.yml

fix: remove unnecessary definition

2022-12-18 15:24:58 +01:00

net_connection_win_mega_nz.yml

Promotion rules (#3821 )

2022-12-27 12:29:10 +01:00

net_connection_win_msiexec.yml

Order yaml field

2022-10-26 09:42:26 +02:00

net_connection_win_ngrok_io.yml

Order yaml field

2022-10-26 09:42:26 +02:00

net_connection_win_ngrok_tunnel.yml

Update rules/windows/network_connection/net_connection_win_ngrok_tunnel.yml

2022-11-04 10:49:17 +01:00

net_connection_win_notepad_network_connection.yml

Order yaml field

2022-10-26 09:42:26 +02:00

net_connection_win_powershell_network_connection.yml

feat: general fixes

2022-11-22 01:22:36 +01:00

net_connection_win_python.yml

Order yaml field

2022-10-26 09:42:26 +02:00

net_connection_win_rdp_reverse_tunnel.yml

fix: broken single item lists

2022-12-08 16:23:58 +01:00

net_connection_win_rdp_to_http.yml

New Rules + Update

2022-07-14 17:35:50 +01:00

net_connection_win_regsvr32_network_activity.yml

Order yaml field

2022-10-26 09:42:26 +02:00

net_connection_win_remote_powershell_session_network.yml

feat: updates and enhancements

2023-01-10 00:13:37 +01:00

net_connection_win_rundll32_net_connections.yml

Fix invalid field cast or name (#3841 )

2022-12-30 11:46:21 +01:00

net_connection_win_script_wan.yml

Order yaml field

2022-10-26 09:42:26 +02:00

net_connection_win_script.yml

Order yaml field

2022-10-26 09:42:26 +02:00

net_connection_win_silenttrinity_stager_msbuild_activity.yml

Order yaml field

2022-10-26 09:42:26 +02:00

net_connection_win_susp_binary_no_cmdline.yml

Order yaml field

2022-10-26 09:42:26 +02:00

net_connection_win_susp_cmstp.yml

Order yaml field

2022-10-26 09:42:26 +02:00

net_connection_win_susp_dropbox_api.yml

Order yaml field

2022-10-26 09:42:26 +02:00

net_connection_win_susp_epmap.yml

Order yaml field

2022-10-26 09:42:26 +02:00

net_connection_win_susp_outbound_kerberos_connection.yml

Order yaml field

2022-10-26 09:42:26 +02:00

net_connection_win_susp_outbound_mobsync_connection.yml

Order yaml field

2022-10-26 09:42:26 +02:00

net_connection_win_susp_outbound_smtp_connections.yml

Order yaml field

2022-10-26 09:42:26 +02:00

net_connection_win_susp_prog_location_network_connection.yml

fix: broken single item lists

2022-12-08 16:23:58 +01:00

net_connection_win_susp_rdp.yml

Fix

2022-11-03 09:39:48 +01:00

net_connection_win_wuauclt_network_connection.yml

fix: wrong condition

2022-12-15 19:02:56 +01:00