blue-team-tools/rules at 45b93fcfabe6e10a03773fbc73d1ed5b7a4a2d92 - blue-team-tools - GreySec Git

security-tools/blue-team-tools

Files

T

History

Expected 39db80478e

Create Release / Create Release (push) Has been cancelled

Details

Merge PR #4834 from @CertainlyP - Add Outbound Network Connection Initiated By Microsoft Dialer

new: Outbound Network Connection Initiated By Microsoft Dialer 

---------

Co-authored-by: nasbench <8741929+nasbench@users.noreply.github.com>

2024-04-29 12:54:38 +02:00

..

Merge PR #4694 from @LAripping - Add native Kubernetes detections

2024-03-26 18:26:46 +01:00

Merge PR #4533 from @nasbench - Promote experimental rules

2023-11-02 10:48:45 +01:00

Merge PR #4836 from @jamesc-grafana - Update AWS Rule to use fieldref modifier instead of contains

2024-04-29 12:53:54 +02:00

Merge PR #4681 from @nasbench - Add Missing Ref & Tags

2024-01-29 13:37:20 +01:00

Merge PR #4795 from @signalblur - Update Linux Command History Tampering rule

2024-04-17 14:28:17 +02:00

Merge PR #4823 from @pratinavchandra - Update CLI flag for Gatekeeper Bypass via Xattr

2024-04-19 11:10:38 +02:00

Merge PR #4765 from @frack113 - Update additional rules to use the cidr modifier

2024-03-13 14:51:21 +01:00

Merge PR #4815 from - Add new malware user-Agent

2024-04-15 10:26:56 +02:00

Merge PR #4834 from @CertainlyP - Add Outbound Network Connection Initiated By Microsoft Dialer

2024-04-29 12:54:38 +02:00

README.md

chore: move more rules

2023-04-21 15:01:48 +02:00

README.md

TBD