Logo
Explore Help
Sign In
security-tools/blue-team-tools
1
0
Fork 0
You've already forked blue-team-tools
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
2e6f87e2effd5f000df93c2f77e59e14f2fd17ea
blue-team-tools/rules/windows
T
History
Florian Roth 2e6f87e2ef Update win_susp_ping_hex_ip.yml
2020-09-07 09:34:18 +02:00
..
builtin
fix: FPs with McAfee and CyberReason
2020-09-02 12:30:34 +02:00
deprecated
fix: buggy rule
2020-05-23 18:32:02 +02:00
driver_load
fix: bugfix and cosmetics
2020-06-24 18:10:58 +02:00
file_event
add wmi persistence script event consumer false positive
2020-07-20 12:27:16 +08:00
image_load
Updated tags to include sub-techniques
2020-07-18 02:50:57 +01:00
malware
Further subtechnique updates
2020-06-17 11:31:40 -06:00
network_connection
Updated tags to include sub-techniques
2020-07-18 02:50:57 +01:00
other
Updated to include extra registry key
2020-07-18 02:37:11 +01:00
powershell
Merge branch 'master' of github.com:Neo23x0/sigma
2020-07-15 10:27:33 -04:00
process_access
Updated invoke_phantom with sub-technique mapping
2020-07-18 02:32:42 +01:00
process_creation
Update win_susp_ping_hex_ip.yml
2020-09-07 09:34:18 +02:00
registry_event
remove false positives in Windows being too broad and add specific keys looked at + add keys from wow64
2020-08-18 05:28:37 -04:00
sysmon
Merge pull request #928 from duzvik/master
2020-08-12 17:15:27 +02:00
Powered by Gitea Version: 1.26.1 Page: 87ms Template: 5ms
Auto
English
Bahasa Indonesia Deutsch English Español Français Gaeilge Italiano Latviešu Magyar nyelv Nederlands Polski Português de Portugal Português do Brasil Suomi Svenska Türkçe Čeština Ελληνικά Български Русский Українська فارسی മലയാളം 日本語 简体中文 繁體中文(台灣) 繁體中文(香港) 한국어
Licenses API