security-tools/blue-team-tools
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
1e41c5378ecf42cc09cb4c538cddcdb438455df0
blue-team-tools/rules/windows/file
T
History
Arnim Rupp 3f3b1540a0 Merge PR #5518 from @ruppde - new rule and updates for ADExplorer 
new: ADExplorer Writing Complete AD Snapshot Into .dat File
update: Active Directory Database Snapshot Via ADExplorer - add more selections
update: Suspicious Active Directory Database Snapshot Via ADExplorer - add more selections

---------

Co-authored-by: Swachchhanda Shrawan Poudel <87493836+swachchhanda000@users.noreply.github.com>
Co-authored-by: phantinuss <79651203+phantinuss@users.noreply.github.com>
2025-07-14 12:02:18 +02:00
..
file_access
Merge PR #5448 from @nasbench - Promote older rules status from experimental to test
2025-06-02 13:29:48 +02:00
file_change
Merge PR #4950 from @nasbench - Comply With v2 Spec Changes
2024-08-12 12:02:50 +02:00
file_delete
Merge PR #5513 from @swachchhanda000 - fix FPs observed via Aurora
2025-07-08 10:29:01 +02:00
file_event
Merge PR #5518 from @ruppde - new rule and updates for ADExplorer
2025-07-14 12:02:18 +02:00
file_executable_detected
Merge PR #5101 from @nasbench - Promote older rules status from experimental to test
2024-12-01 13:40:32 +01:00
file_rename
Merge PR #4950 from @nasbench - Comply With v2 Spec Changes
2024-08-12 12:02:50 +02:00