security-tools/blue-team-tools
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
401d71d9d3f71d831b0826c2d4572c9ff0e0c49e
blue-team-tools/rules
T
History
Gavin Knapp 401d71d9d3 Create net_connection_win_notion.yml 
created a rule to detecdt possible C2 coms using Notion SaaS as the C2 endpoint.
2023-05-03 23:29:26 +01:00
..
application
remove duplicate reference urls
2023-04-18 11:03:07 -04:00
category
Merge pull request #4006 from SigmaHQ/rule-devel
2023-02-03 17:13:56 +01:00
cloud
fix: add missing modified
2023-04-28 11:12:30 +02:00
compliance
…
linux
fix: update curl rules flags to use regex (#4213)
2023-05-03 10:16:01 +02:00
macos
feat: new macos rule Suspicious Browser Child Process (#4053)
2023-04-05 14:58:09 +02:00
network
feat: new rules, updates and fp fixes (#4136)
2023-04-03 12:06:14 +02:00
web
chore: move rules to new folders (#4205)
2023-05-02 23:17:57 +02:00
windows
Create net_connection_win_notion.yml
2023-05-03 23:29:26 +01:00
README.md
chore: move more rules
2023-04-21 15:01:48 +02:00

README.md

TBD

Reference in New Issue View Git Blame Copy Permalink