blue-team-tools/rules at 3fe2695635e16d74a096f9bc901579571e0aaa39 - blue-team-tools - GreySec Git

security-tools/blue-team-tools

Files

T

History

Axel-NTT 3fe2695635 Merge PR #5921 from @Axel-NTT - Update BPFDoor Abnormal Process ID or Lock File Accessed

update: BPFDoor Abnormal Process ID or Lock File Accessed - add new file paths from Rapid7 research to increase coverage

2026-04-01 13:16:52 +02:00

..

Merge PR #5826 from @marcopedrinazzi - Add New OpenCanary Rules

2026-01-24 12:32:10 +01:00

Merge PR #5477 from @phantinuss - chore: update MITRE tag t1219 to t1219.002

2025-06-13 10:00:52 +02:00

Merge PR #5799 from @nasbench - Update logic to use errorCode instead for better mapping and accuracy

2025-12-09 10:17:50 +01:00

Merge PR #5738 from @nasbench - rename folders and update readme

2025-11-03 10:35:44 +01:00

Merge PR #5921 from @Axel-NTT - Update BPFDoor Abnormal Process ID or Lock File Accessed

2026-04-01 13:16:52 +02:00

Merge PR #5791 from @Niicolaa - fix: add correct osascript path

2025-12-09 08:03:04 +05:45

Merge PR #5823 from @darses - Update DNS Query to External Service Interaction Domains

2026-01-24 12:37:27 +01:00

Merge PR #5769 from @nasbench - fix keywords rule and remove the fields field

2025-11-24 09:54:29 +01:00

Merge PR #5924 from @Neo23x0 - Fix Security Support Provider (SSP) Added to LSA Configuration

2026-04-01 12:35:29 +02:00

README.md

chore: move more rules

2023-04-21 15:01:48 +02:00

README.md

TBD