Logo
Explore Help
Sign In
security-tools/blue-team-tools
1
0
Fork 0
You've already forked blue-team-tools
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
32a17342b42e2a59f8f3d26e5a3dcd5957a3133e
blue-team-tools/rules/windows/powershell/powershell_classic
T
History
Nasreddine Bencherchali 025c1a4aae fix: enhance logic and severity
2022-12-19 11:21:24 +01:00
..
posh_pc_abuse_nslookup_with_dns_records.yml
fix: enhance logic and severity
2022-12-19 11:21:24 +01:00
posh_pc_alternate_powershell_hosts.yml
fix: more fp found in testing and enhance fp metadata
2022-12-13 11:25:23 +01:00
posh_pc_delete_volume_shadow_copies.yml
Order yaml field
2022-10-26 09:43:39 +02:00
posh_pc_downgrade_attack.yml
Update title (#3746)
2022-12-02 18:10:43 +01:00
posh_pc_exe_calling_ps.yml
Order yaml field
2022-10-26 09:43:39 +02:00
posh_pc_powercat.yml
Order yaml field
2022-10-26 09:43:39 +02:00
posh_pc_remote_powershell_session.yml
Order yaml field
2022-10-26 09:43:39 +02:00
posh_pc_renamed_powershell.yml
Order yaml field
2022-10-26 09:43:39 +02:00
posh_pc_susp_athremotefxvgpudisablementcommand.yml
Update title (#3746)
2022-12-02 18:10:43 +01:00
posh_pc_susp_download.yml
Update rules
2022-11-09 16:13:17 +01:00
posh_pc_susp_get_nettcpconnection.yml
Order yaml field
2022-10-26 09:43:39 +02:00
posh_pc_susp_zip_compress.yml
Update title (#3746)
2022-12-02 18:10:43 +01:00
posh_pc_tamper_with_windows_defender.yml
Order yaml field
2022-10-26 09:43:39 +02:00
posh_pc_wsman_com_provider_no_powershell.yml
old experimental rule promotion
2022-10-09 16:54:04 +02:00
posh_pc_xor_commandline.yml
Update title (#3746)
2022-12-02 18:10:43 +01:00
Powered by Gitea Version: 1.26.1 Page: 35ms Template: 4ms
Auto
English
Bahasa Indonesia Deutsch English Español Français Gaeilge Italiano Latviešu Magyar nyelv Nederlands Polski Português de Portugal Português do Brasil Suomi Svenska Türkçe Čeština Ελληνικά Български Русский Українська فارسی മലയാളം 日本語 简体中文 繁體中文(台灣) 繁體中文(香港) 한국어
Licenses API