Josh Brower 4c4b8db7cf Zeek RDP rule

2020-08-23 13:16:42 -04:00

..

zeek_dce_rpc_mitre_bzar_execution.yml

Initial round of subtechnique updates

2020-06-16 14:46:08 -06:00

zeek_dce_rpc_mitre_bzar_persistence.yml

Initial round of subtechnique updates

2020-06-16 14:46:08 -06:00

zeek_http_executable_download_from_webdav.yml

Initial round of subtechnique updates

2020-06-16 14:46:08 -06:00

zeek_rdp_public_listener.yml

Zeek RDP rule

2020-08-23 13:16:42 -04:00

zeek_smb_converted_win_atsvc_task.yml

fix: duplicate IDs

2020-06-24 17:04:04 +02:00

zeek_smb_converted_win_impacket_secretdump.yml

Initial round of subtechnique updates

2020-06-16 14:46:08 -06:00

zeek_smb_converted_win_lm_namedpipe.yml

fix: duplicate IDs

2020-06-24 17:04:04 +02:00

zeek_smb_converted_win_susp_psexec.yml

Initial round of subtechnique updates

2020-06-16 14:46:08 -06:00

zeek_smb_converted_win_susp_raccess_sensitive_fext.yml

fix: zeek rule references isn't a list

2020-07-14 00:33:47 +02:00

zeek_smb_converted_win_transferring_files_with_credential_data.yml

Initial round of subtechnique updates

2020-06-16 14:46:08 -06:00

zeek_susp_kerberos_rc4.yml

Initial round of subtechnique updates

2020-06-16 14:46:08 -06:00

zeek-dce_rpc_domain_user_enumeration.yml

domain user enumeration via zeek rpc (dce_rpc) log.

2020-05-19 05:08:26 -04:00