security-tools/blue-team-tools
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
2f4eed2fe4e001260d22367d045d4c60b5960493
blue-team-tools/rules/windows/builtin
T
History
Florian Roth 928f07c366 Merge pull request #3683 from SigmaHQ/rule-devel 
rule: KDC RC4-HMAC downgrade CVE-2022-37966
2022-11-09 10:19:04 +01:00
..
application
Order yaml field
2022-10-25 11:08:51 +02:00
applocker
Order yaml field
2022-10-25 11:08:51 +02:00
bits_client
Order yaml field
2022-10-25 11:08:51 +02:00
code_integrity
Fix FP
2022-11-07 12:11:30 +01:00
diagnosis/scripted
Order yaml field
2022-10-25 11:08:51 +02:00
dns_server
Order yaml field
2022-10-25 11:08:51 +02:00
driverframeworks
Order yaml field
2022-10-25 11:08:51 +02:00
firewall_as
fix: new FPs found in testing environment
2022-11-01 16:19:14 +01:00
ldap
old experimental rule promotion
2022-10-09 16:54:04 +02:00
msexchange
Add/Update Exchange/Mailbox Rules
2022-10-26 23:17:54 +02:00
ntlm
Order yaml field
2022-10-25 11:08:51 +02:00
openssh
Change rule service
2022-10-25 20:03:11 +02:00
printservice
Order yaml field
2022-10-25 11:08:51 +02:00
security
Rule add: windows access token abuse (#3675)
2022-11-09 09:43:15 +01:00
security_mitigations
update modified tag
2022-09-28 06:32:34 +09:00
servicebus
old experimental rule promotion
2022-10-09 16:54:04 +02:00
shell_core
Order yaml field
2022-10-25 11:08:51 +02:00
smbclient
Order yaml field
2022-10-25 11:08:51 +02:00
system
Merge pull request #3683 from SigmaHQ/rule-devel
2022-11-09 10:19:04 +01:00
taskscheduler
Order yaml field
2022-10-25 11:08:51 +02:00
terminalservices
Order yaml field
2022-10-25 11:08:51 +02:00
windefend
Order yaml field
2022-10-25 11:08:51 +02:00
wmi
Order yaml field
2022-10-25 11:08:51 +02:00
win_alert_mimikatz_keywords.yml
Order yaml field
2022-10-25 11:08:51 +02:00