blue-team-tools

Files

T

Matt Anderson 30aebbb65c Merge PR #5834 from @MATTANDERS0N - Add Devcon and KDU Execution Rules

new: PUA - Kernel Driver Utility (KDU) Execution
new: Devcon Execution Disabling VMware VMCI Device

---------

Co-authored-by: Swachchhanda Shrawan Poudel <87493836+swachchhanda000@users.noreply.github.com>
Co-authored-by: Nasreddine Bencherchali <monsteroffire2@gmail.com>

2026-01-24 12:36:29 +01:00

application

Merge PR #5826 from @marcopedrinazzi - Add New OpenCanary Rules

2026-01-24 12:32:10 +01:00

category

Merge PR #5477 from @phantinuss - chore: update MITRE tag t1219 to t1219.002

2025-06-13 10:00:52 +02:00

cloud

Merge PR #5799 from @nasbench - Update logic to use errorCode instead for better mapping and accuracy

2025-12-09 10:17:50 +01:00

identity

Merge PR #5738 from @nasbench - rename folders and update readme