blue-team-tools/rules at 2837671f38215c03bbbd9e4302ea330eba4f40ad - blue-team-tools - GreySec Git

security-tools/blue-team-tools

Files

T

History

pratinavchandra 2837671f38 Merge PR #4782 from @pratinavchandra - Add Launch Agent/Daemon Execution Via Launchctl

new: Launch Agent/Daemon Execution Via Launchctl 

---------

Co-authored-by: nasbench <8741929+nasbench@users.noreply.github.com>

2024-05-13 16:55:33 +02:00

..

Merge PR #4694 from @LAripping - Add native Kubernetes detections

2024-03-26 18:26:46 +01:00

Merge PR #4533 from @nasbench - Promote experimental rules

2023-11-02 10:48:45 +01:00

Merge PR #4836 from @jamesc-grafana - Update AWS Rule to use fieldref modifier instead of contains

2024-04-29 12:53:54 +02:00

Merge PR #4681 from @nasbench - Add Missing Ref & Tags

2024-01-29 13:37:20 +01:00

Merge PR #4822 from @hasselj - Add Potentially Suspicious Malware Callback Communication - Linux

2024-05-10 17:07:43 +02:00

Merge PR #4782 from @pratinavchandra - Add Launch Agent/Daemon Execution Via Launchctl

2024-05-13 16:55:33 +02:00

Merge PR #4765 from @frack113 - Update additional rules to use the cidr modifier

2024-03-13 14:51:21 +01:00

Merge PR #4845 from @ahmedfarou22 - Proxy WebDAV Rule Improvements/New Rule

2024-05-10 16:16:42 +02:00

Merge PR #4818 from @swachchhanda000 - Add Potentially Suspicious Child Process Of KeyScrambler.exe

2024-05-13 13:48:35 +02:00

README.md

chore: move more rules

2023-04-21 15:01:48 +02:00

README.md

TBD