security-tools/blue-team-tools
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity
Files
46559388e054e1aff3d7b3d8f41ebead2b690b21
blue-team-tools/rules/windows/network_connection
T
History
github-actions[bot] 0108cdc344 Merge PR #4745 from @nasbench - Promote older rules status from experimental to test 
chore: promote older rules status from experimental to test
2024-03-01 15:38:35 +01:00
..
net_connection_win_addinutil.yml
Merge PR #4702 from @nasbench - Rule tuning and updates
2024-02-12 12:29:36 +01:00
net_connection_win_certutil_initiated_connection.yml
Merge PR #4702 from @nasbench - Rule tuning and updates
2024-02-12 12:29:36 +01:00
net_connection_win_dllhost_non_local_ip.yml
Merge PR #4702 from @nasbench - Rule tuning and updates
2024-02-12 12:29:36 +01:00
net_connection_win_domain_mega_nz.yml
Merge PR #4702 from @nasbench - Rule tuning and updates
2024-02-12 12:29:36 +01:00
net_connection_win_domain_ngrok_tunnel.yml
Merge PR #4702 from @nasbench - Rule tuning and updates
2024-02-12 12:29:36 +01:00
net_connection_win_domain_ngrok.yml
Merge PR #4702 from @nasbench - Rule tuning and updates
2024-02-12 12:29:36 +01:00
net_connection_win_eqnedt.yml
Merge PR #4702 from @nasbench - Rule tuning and updates
2024-02-12 12:29:36 +01:00
net_connection_win_imewdbld.yml
Merge PR #4702 from @nasbench - Rule tuning and updates
2024-02-12 12:29:36 +01:00
net_connection_win_msiexec_http.yml
Merge PR #4702 from @nasbench - Rule tuning and updates
2024-02-12 12:29:36 +01:00
net_connection_win_notepad.yml
Merge PR #4702 from @nasbench - Rule tuning and updates
2024-02-12 12:29:36 +01:00
net_connection_win_notion_api_susp_communication.yml
Merge PR #4745 from @nasbench - Promote older rules status from experimental to test
2024-03-01 15:38:35 +01:00
net_connection_win_office_outbound_non_local_ip.yml
Merge PR #4702 from @nasbench - Rule tuning and updates
2024-02-12 12:29:36 +01:00
net_connection_win_office_uncommon_ports.yml
Merge PR #4702 from @nasbench - Rule tuning and updates
2024-02-12 12:29:36 +01:00
net_connection_win_python.yml
Merge PR #4702 from @nasbench - Rule tuning and updates
2024-02-12 12:29:36 +01:00
net_connection_win_rdp_outbound_over_non_standard_tools.yml
Merge PR #4702 from @nasbench - Rule tuning and updates
2024-02-12 12:29:36 +01:00
net_connection_win_rdp_reverse_tunnel.yml
Merge PR #4702 from @nasbench - Rule tuning and updates
2024-02-12 12:29:36 +01:00
net_connection_win_rdp_to_http.yml
Merge PR #4479 From @frack113 - Upgrade Rules Status
2023-10-17 14:35:26 +02:00
net_connection_win_regsvr32_network_activity.yml
Merge PR #4702 from @nasbench - Rule tuning and updates
2024-02-12 12:29:36 +01:00
net_connection_win_rundll32_net_connections.yml
Merge PR #4482 From @nasbench - Add New Automation Workflows
2023-10-18 11:53:44 +02:00
net_connection_win_script_wan.yml
Merge PR #4479 From @frack113 - Upgrade Rules Status
2023-10-17 14:35:26 +02:00
net_connection_win_script.yml
Merge PR #4479 From @frack113 - Upgrade Rules Status
2023-10-17 14:35:26 +02:00
net_connection_win_silenttrinity_stager_msbuild_activity.yml
Order yaml field
2022-10-26 09:42:26 +02:00
net_connection_win_susp_binary_no_cmdline.yml
Merge PR #4479 From @frack113 - Upgrade Rules Status
2023-10-17 14:35:26 +02:00
net_connection_win_susp_cmstp.yml
Merge PR #4479 From @frack113 - Upgrade Rules Status
2023-10-17 14:35:26 +02:00
net_connection_win_susp_crypto_mining_pools.yml
Merge PR #4702 from @nasbench - Rule tuning and updates
2024-02-12 12:29:36 +01:00
net_connection_win_susp_dead_drop_resolvers.yml
Merge PR #4702 from @nasbench - Rule tuning and updates
2024-02-12 12:29:36 +01:00
net_connection_win_susp_devtunnel_connection.yml
Merge PR #4702 from @nasbench - Rule tuning and updates
2024-02-12 12:29:36 +01:00
net_connection_win_susp_dropbox_api.yml
Merge PR #4479 From @frack113 - Upgrade Rules Status
2023-10-17 14:35:26 +02:00
net_connection_win_susp_epmap.yml
Merge PR #4482 From @nasbench - Add New Automation Workflows
2023-10-18 11:53:44 +02:00
net_connection_win_susp_external_ip_lookup.yml
Merge PR #4710 from @xiangchen96 - Add ipconfig.io domain
2024-02-08 16:16:02 +01:00
net_connection_win_susp_file_sharing_domains_susp_folders.yml
Merge PR #4702 from @nasbench - Rule tuning and updates
2024-02-12 12:29:36 +01:00
net_connection_win_susp_google_api_non_browser_access.yml
Merge PR #4702 from @nasbench - Rule tuning and updates
2024-02-12 12:29:36 +01:00
net_connection_win_susp_malware_callback_port.yml
Merge PR #4577 from @nasbench - Multiple Fixes & Updates
2023-12-21 21:04:18 +01:00
net_connection_win_susp_malware_callback_ports_uncommon.yml
Merge PR #4577 from @nasbench - Multiple Fixes & Updates
2023-12-21 21:04:18 +01:00
net_connection_win_susp_outbound_kerberos_connection.yml
Merge PR #4482 From @nasbench - Add New Automation Workflows
2023-10-18 11:53:44 +02:00
net_connection_win_susp_outbound_mobsync_connection.yml
Merge PR #4479 From @frack113 - Upgrade Rules Status
2023-10-17 14:35:26 +02:00
net_connection_win_susp_outbound_smtp_connections.yml
Merge PR #4479 From @frack113 - Upgrade Rules Status
2023-10-17 14:35:26 +02:00
net_connection_win_susp_prog_location_network_connection.yml
Merge PR #4577 from @nasbench - Multiple Fixes & Updates
2023-12-21 21:04:18 +01:00
net_connection_win_susp_remote_powershell_session.yml
Merge PR #4702 from @nasbench - Rule tuning and updates
2024-02-12 12:29:36 +01:00
net_connection_win_telegram_api_non_browser_access.yml
Merge PR #4482 From @nasbench - Add New Automation Workflows
2023-10-18 11:53:44 +02:00
net_connection_win_vscode_tunnel_connection.yml
Merge PR #4580 from @deFr0ggy - Update VsCode/DevTunnels Communication Related Rules
2023-11-20 13:22:15 +01:00
net_connection_win_winlogon_net_connections.yml
Merge PR #4745 from @nasbench - Promote older rules status from experimental to test
2024-03-01 15:38:35 +01:00
net_connection_win_wordpad_uncommon_ports.yml
Merge PR #4702 from @nasbench - Rule tuning and updates
2024-02-12 12:29:36 +01:00
net_connection_win_wuauclt_network_connection.yml
Merge PR #4575 from @fukusuket - Fix typo in the selection name
2023-11-17 15:25:24 +01:00