blue-team-tools/rules at 41bef8eed5b611eabf875051c8e402aafa5e8eae - blue-team-tools - GreySec Git

security-tools/blue-team-tools

Files

T

History

Mohamed Ashraf 41bef8eed5 Merge PR #5189 from @X-Junior - Add Potentially Suspicious WDAC Policy File Creation

new: Potentially Suspicious WDAC Policy File Creation

---------

Co-authored-by: Nasreddine Bencherchali <nasreddineb@splunk.com>

2025-02-17 12:46:16 +01:00

..

Merge PR #5177 from @nasbench - promote older rules status from experimental to test

2025-02-03 18:23:12 +01:00

Merge PR #5068 from @ruppde - Update rules in the Antivirus category with additional strings and signature names

2024-11-04 11:45:07 +01:00

Merge PR #5157 from @joshnck - Add Azure Login Bypassing Conditional Access Policies

2025-01-19 22:00:59 +01:00

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

Merge PR #5177 from @nasbench - promote older rules status from experimental to test

2025-02-03 18:23:12 +01:00

Merge PR #5177 from @nasbench - promote older rules status from experimental to test

2025-02-03 18:23:12 +01:00

Merge PR #5064 from @Koifman - Add missing ATT&CK tag to Monero Crypto Coin Mining Pool Lookup

2024-11-04 11:32:02 +01:00

Merge PR #5164 from @Neo23x0 - Update Exploit Framework User Agent

2025-01-19 21:42:40 +01:00

Merge PR #5189 from @X-Junior - Add Potentially Suspicious WDAC Policy File Creation

2025-02-17 12:46:16 +01:00

README.md

chore: move more rules

2023-04-21 15:01:48 +02:00

README.md

TBD