Florian Roth 1aaed07dd7 Rule: Suspicious base64 encoded part of DNS query

2018-05-10 14:08:52 +02:00

..

net_mal_dns_cobaltstrike.yml

Rule: Cobalt Strike DNS Beaconing

2018-05-10 14:08:52 +02:00

net_susp_dns_b64_queries.yml

Rule: Suspicious base64 encoded part of DNS query

2018-05-10 14:08:52 +02:00

net_susp_network_scan.yml

Added field names to first rules

2017-09-12 23:54:04 +02:00