Logo
Explore Help
Sign In
security-tools/blue-team-tools
1
0
Fork 0
You've already forked blue-team-tools
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
48c1e3058c8dd825fef6db5637f1ed3b7442a4e2
blue-team-tools/rules/windows
T
History
phantinuss 9136963672 fix: filter empty ParentImage which might happen as a race condition on startup
2022-11-09 16:45:00 +01:00
..
builtin
Merge pull request #3683 from SigmaHQ/rule-devel
2022-11-09 10:19:04 +01:00
create_remote_thread
Order yaml field
2022-10-25 12:00:56 +02:00
create_stream_hash
Add browsers
2022-10-31 20:57:22 +01:00
dns_query
Add browsers
2022-10-31 20:57:22 +01:00
driver_load
Order yaml field
2022-10-25 12:00:56 +02:00
file
fix: bcedit downloaded to C:\Windows\SoftwareDistribution
2022-11-09 16:44:58 +01:00
image_load
Update image_load_susp_python_image_load.yml
2022-11-08 17:33:45 +01:00
network_connection
Merge pull request #3670 from nasbench/fix-false-positives
2022-11-04 17:56:32 +01:00
pipe_created
Update PR
2022-11-03 10:57:56 -04:00
powershell
Merge pull request #3683 from SigmaHQ/rule-devel
2022-11-09 10:19:04 +01:00
process_access
Update proc_access_win_in_memory_assembly_execution.yml
2022-11-03 11:19:09 +01:00
process_creation
fix: filter empty ParentImage which might happen as a race condition on startup
2022-11-09 16:45:00 +01:00
raw_access_thread
Update raw_access_thread_disk_access_using_illegitimate_tools.yml
2022-11-08 19:10:05 +01:00
registry
fix: new FPs found in testing environment
2022-11-01 16:19:14 +01:00
sysmon
Order yaml field
2022-10-25 12:00:56 +02:00
wmi_event
Order yaml field
2022-10-25 12:00:56 +02:00
Powered by Gitea Version: 1.26.1 Page: 155ms Template: 8ms
Auto
English
Bahasa Indonesia Deutsch English Español Français Gaeilge Italiano Latviešu Magyar nyelv Nederlands Polski Português de Portugal Português do Brasil Suomi Svenska Türkçe Čeština Ελληνικά Български Русский Українська فارسی മലയാളം 日本語 简体中文 繁體中文(台灣) 繁體中文(香港) 한국어
Licenses API