blue-team-tools

Files

T

Anish 2b90adcb28 Merge PR #4661 from @Tuutaans - Suspicious forfiles Child processes

new: Forfiles.EXE Child Process Masquerading
update: Forfiles Command Execution - Remove unnecessary selection and enhance metadata information

---------

Co-authored-by: Anish Bogati <abo@logpoint.com>
Co-authored-by: nasbench <8741929+nasbench@users.noreply.github.com>

2024-01-10 14:44:05 +01:00

application

chore: promote older rules status from experimental to test (#4651 )

2024-01-01 09:00:51 +01:00

category

Merge PR #4533 from @nasbench - Promote experimental rules

2023-11-02 10:48:45 +01:00

cloud

Merge PR #4611 from @nasbench - Promote Older Rules Status From experimental To test

2023-12-01 12:50:36 +01:00

compliance

feat: filename test enhancements (#3812 )