Nasreddine Bencherchali 3d9372bef3 feat: new rules, updates and fp fixes (#4136)

2023-04-03 12:06:14 +02:00

..

zeek_dce_rpc_mitre_bzar_execution.yml

Order yaml field 4 (#3628)

2022-10-25 09:30:05 +02:00

zeek_dce_rpc_mitre_bzar_persistence.yml

Order yaml field 4 (#3628)

2022-10-25 09:30:05 +02:00

zeek_dce_rpc_potential_petit_potam_efs_rpc_call.yml

feat: enhance duplicate test (#3736)

2022-11-29 13:47:09 +01:00

zeek_dce_rpc_printnightmare_print_driver_install.yml

Order yaml field 4 (#3628)

2022-10-25 09:30:05 +02:00

zeek_dce_rpc_smb_spoolss_named_pipe.yml

old experimental rule promotion

2022-10-09 16:54:04 +02:00

zeek_default_cobalt_strike_certificate.yml

Order yaml field 4 (#3628)

2022-10-25 09:30:05 +02:00

zeek_dns_mining_pools.yml

feat: updates multiple mitre tech/sub-tech/tactics (#3913)

2023-01-12 17:04:38 +01:00

zeek_dns_nkn.yml

Order yaml field 4 (#3628)

2022-10-25 09:30:05 +02:00

zeek_dns_susp_zbit_flag.yml

feat: enhance duplicate test (#3736)

2022-11-29 13:47:09 +01:00

zeek_dns_torproxy.yml

feat: updates multiple mitre tech/sub-tech/tactics (#3913)

2023-01-12 17:04:38 +01:00

zeek_http_executable_download_from_webdav.yml

Order yaml field 4 (#3628)

2022-10-25 09:30:05 +02:00

zeek_http_omigod_no_auth_rce.yml

Order yaml field 4 (#3628)

2022-10-25 09:30:05 +02:00

zeek_http_webdav_put_request.yml

Order yaml field 4 (#3628)

2022-10-25 09:30:05 +02:00

zeek_rdp_public_listener.yml

feat: updates multiple mitre tech/sub-tech/tactics (#3913)

2023-01-12 17:04:38 +01:00

zeek_smb_converted_win_atsvc_task.yml

fix: rename links from old repo to SigmaHQ

2022-12-27 21:05:16 +01:00

zeek_smb_converted_win_impacket_secretdump.yml

Order yaml field 4 (#3628)

2022-10-25 09:30:05 +02:00

zeek_smb_converted_win_lm_namedpipe.yml

fix: rename links from old repo to SigmaHQ

2022-12-27 21:05:16 +01:00

zeek_smb_converted_win_susp_psexec.yml

fix: rename links from old repo to SigmaHQ

2022-12-27 21:05:16 +01:00

zeek_smb_converted_win_susp_raccess_sensitive_fext.yml

fix: rename links from old repo to SigmaHQ

2022-12-27 21:05:16 +01:00

zeek_smb_converted_win_transferring_files_with_credential_data.yml

fix: rename links from old repo to SigmaHQ

2022-12-27 21:05:16 +01:00

zeek_susp_kerberos_rc4.yml

Order yaml field 4 (#3628)

2022-10-25 09:30:05 +02:00