This website requires JavaScript.
Explore
Help
Sign In
security-tools
/
blue-team-tools
Watch
1
Star
0
Fork
0
You've already forked blue-team-tools
Code
Issues
Pull Requests
Actions
Packages
Projects
Releases
Wiki
Activity
Files
28426f9b7fb2c9627ffaa2cdde53e3a01733658a
blue-team-tools
/
rules
/
windows
T
History
Florian Roth
50db6dcc69
Merge pull request
#1002
from scottdermott/master
...
+ Adding exclusion for Azure AD Sync (MSOL_xxxxxxxx)
2020-09-15 08:17:02 +02:00
..
builtin
Merge pull request
#1002
from scottdermott/master
2020-09-15 08:17:02 +02:00
deprecated
fix: buggy rule
2020-05-23 18:32:02 +02:00
driver_load
att&ck tags review: windows/builtin, windows/driver_load, windows/file_event, windows/image_load, windows/other
2020-08-25 01:09:17 +02:00
file_event
Merge pull request
#989
from oscd-initiative/master
2020-09-08 13:27:58 +02:00
image_load
Merge pull request
#989
from oscd-initiative/master
2020-09-08 13:27:58 +02:00
malware
Further subtechnique updates
2020-06-17 11:31:40 -06:00
network_connection
added missing ATT&CK v6.3 IDs with comments and removed unnecessary "modified" attributes
2020-08-25 23:51:22 +00:00
other
fix typos, update tags
2020-09-13 15:46:45 +02:00
powershell
added missing ATT&CK v6.3 IDs with comments and removed unnecessary "modified" attributes
2020-08-25 23:51:22 +00:00
process_access
fix typos, update tags
2020-09-13 15:46:45 +02:00
process_creation
fix typos, update tags
2020-09-13 15:46:45 +02:00
registry_event
fix typos, update tags
2020-09-13 15:46:45 +02:00
sysmon
Revert "att&ck tags review: windows/process_creation part 5"
2020-09-07 01:28:08 +04:00