blue-team-tools

Files

T

$frack113$ frack113 2cb6ccd04d Merge PR #4536 from @frack113 - Add New Rules Related To Sysvol Access

new: Access To Sysvol Policies Share By Uncommon Process
new: Access To Potentially Sensitive Sysvol Files By Uncommon Application 

---------

Co-authored-by: nasbench <8741929+nasbench@users.noreply.github.com>

2023-12-21 17:04:40 +01:00

application

Merge PR #4479 From @frack113 - Upgrade Rules Status

2023-10-17 14:35:26 +02:00

category

Merge PR #4533 from @nasbench - Promote experimental rules

2023-11-02 10:48:45 +01:00

cloud

Merge PR #4611 from @nasbench - Promote Older Rules Status From experimental To test

2023-12-01 12:50:36 +01:00

compliance

feat: filename test enhancements (#3812 )

2022-12-23 09:25:16 +01:00

linux

Merge PR #4592 from @skaynum - Create Rule to detect Linux Process Code Injection

2023-12-01 19:29:03 +01:00

macos

Merge PR #4615 from @jstnk9 - Update WMIC Discovery Rule + New System Discovery Rules For MacOS

2023-12-21 11:09:47 +01:00

network

Merge PR #4597 from @nasbench - Update Process Access Rules

2023-12-04 01:14:15 +01:00

web

Merge PR #4614 from @X-Junior - updates for multiple rules 4-12-2023

2023-12-11 10:42:44 +01:00

windows

Merge PR #4536 from @frack113 - Add New Rules Related To Sysvol Access

2023-12-21 17:04:40 +01:00

README.md

chore: move more rules

2023-04-21 15:01:48 +02:00

README.md

TBD