blue-team-tools/rules at 4989d43ae97015f8113aed2efcd49d288b8fec21 - blue-team-tools - GreySec Git

security-tools/blue-team-tools

Files

T

History

Swachchhanda Shrawan Poudel 4989d43ae9 Merge PR #4946 from @swachchhanda000 - Add Suspicious Process Masquerading As SvcHost.EXE

new: Suspicious Process Masquerading As SvcHost.EXE 
---------

Co-authored-by: nasbench <8741929+nasbench@users.noreply.github.com>

2024-08-07 10:48:12 +02:00

..

Merge PR #4899 from @kelnage - Add Kubernetes rules in audit log format

2024-07-11 16:09:01 +02:00

Merge PR #4917 from @Neo23x0 - Update antivirus related rules

2024-07-17 16:35:51 +02:00

Merge PR #4942 from @nasbench - promote older rules status from experimental to test

2024-08-01 10:26:14 +02:00

Merge PR #4681 from @nasbench - Add Missing Ref & Tags

2024-01-29 13:37:20 +01:00

Merge PR #4893 from @ryanplasma - Update Microsoft references URLS

2024-07-02 12:00:11 +02:00

Merge PR #4891 from @nasbench - Promote older rules status from experimental to test

2024-07-01 10:42:32 +02:00

Merge PR #4940 from @fukusuket - Update unreachable references blog.menasec[.]net

2024-07-31 10:16:56 +02:00

Merge PR #4928 from @nasbench - Fix FPs and issues found in testing

2024-07-24 09:22:49 +02:00

Merge PR #4946 from @swachchhanda000 - Add Suspicious Process Masquerading As SvcHost.EXE

2024-08-07 10:48:12 +02:00

README.md

chore: move more rules

2023-04-21 15:01:48 +02:00

README.md

TBD