Roberto Rodriguez 2cb540f95e 13 Rules from THP - Backlog Rules (old)

2020-10-13 03:33:55 -04:00

..

cisco/aaa

Second round

2020-09-15 07:02:30 -06:00

zeek

13 Rules from THP - Backlog Rules (old)

2020-10-13 03:33:55 -04:00

net_apt_equationgroup_c2.yml

Second round

2020-09-15 07:02:30 -06:00

net_dns_c2_detection.yml

Second round

2020-09-15 07:02:30 -06:00

net_high_dns_bytes_out.yml

Second round

2020-09-15 07:02:30 -06:00

net_high_dns_requests_rate.yml

Second round

2020-09-15 07:02:30 -06:00

net_high_null_records_requests_rate.yml

Second round

2020-09-15 07:02:30 -06:00

net_high_txt_records_requests_rate.yml

Second round

2020-09-15 07:02:30 -06:00

net_mal_dns_cobaltstrike.yml

Second round

2020-09-15 07:02:30 -06:00

net_susp_dns_b64_queries.yml

Second round

2020-09-15 07:02:30 -06:00

net_susp_dns_txt_exec_strings.yml

Second round

2020-09-15 07:02:30 -06:00

net_susp_network_scan.yml

Second round

2020-09-15 07:02:30 -06:00

net_susp_telegram_api.yml

Second round

2020-09-15 07:02:30 -06:00

net_wannacry_killswitch_domain.yml

Killswitch domain

2020-09-16 20:32:31 -06:00