Files
blue-team-tools/rules
Scoubi 34cea54750 Merge PR #4399 From @Scoubi - New Rules Related To INDEX_ALLOCATION Potential Abuse
new: Potential Hidden Directory Creation Via NTFS INDEX_ALLOCATION Stream
new: Potential Hidden Directory Creation Via NTFS INDEX_ALLOCATION Stream - CLI

---------

Co-authored-by: Nasreddine Bencherchali <8741929+nasbench@users.noreply.github.com>
Co-authored-by: phantinuss <79651203+phantinuss@users.noreply.github.com>
2023-10-11 14:06:28 +02:00
..
2023-04-21 15:01:48 +02:00