github-actions[bot] 6b78144668 Merge PR #4942 from @nasbench - promote older rules status from experimental to test ...

chore: promote older rules status from experimental to test

Co-authored-by: nasbench <nasbench@users.noreply.github.com>

2024-08-01 10:26:14 +02:00

..

net_connection_win_addinutil_initiated.yml

Merge PR #4888 from @nasbench - Add multiple new rules, updates and fixes

2024-07-17 11:04:05 +02:00

net_connection_win_certutil_initiated_connection.yml

Merge PR #4893 from @ryanplasma - Update Microsoft references URLS

2024-07-02 12:00:11 +02:00

net_connection_win_cmstp_initiated_connection.yml

Merge PR #4866 from @Neo23x0 - Update network connection rules

2024-05-31 13:53:53 +02:00

net_connection_win_dialer_initiated_connection.yml

Merge PR #4834 from @CertainlyP - Add Outbound Network Connection Initiated By Microsoft Dialer

2024-04-29 12:54:38 +02:00

net_connection_win_domain_azurewebsites.yml

Merge PR #4888 from @nasbench - Add multiple new rules, updates and fixes

2024-07-17 11:04:05 +02:00

net_connection_win_domain_cloudflared_communication.yml

Merge PR #4866 from @Neo23x0 - Update network connection rules

2024-05-31 13:53:53 +02:00

net_connection_win_domain_crypto_mining_pools.yml

Merge PR #4866 from @Neo23x0 - Update network connection rules

2024-05-31 13:53:53 +02:00

net_connection_win_domain_dead_drop_resolvers.yml

Merge PR #4888 from @nasbench - Add multiple new rules, updates and fixes

2024-07-17 11:04:05 +02:00

net_connection_win_domain_devtunnels.yml

Merge PR #4866 from @Neo23x0 - Update network connection rules

2024-05-31 13:53:53 +02:00

net_connection_win_domain_dropbox_api.yml

Merge PR #4888 from @nasbench - Add multiple new rules, updates and fixes

2024-07-17 11:04:05 +02:00

net_connection_win_domain_external_ip_lookup.yml

Merge PR #4866 from @Neo23x0 - Update network connection rules

2024-05-31 13:53:53 +02:00

net_connection_win_domain_google_api_non_browser_access.yml

Merge PR #4888 from @nasbench - Add multiple new rules, updates and fixes

2024-07-17 11:04:05 +02:00

net_connection_win_domain_localtonet_tunnel.yml

Merge PR #4882 from @netgrain - New rules related to LocaltoNet tunneling

2024-06-20 13:09:49 +02:00

net_connection_win_domain_mega_nz.yml

Merge PR #4866 from @Neo23x0 - Update network connection rules

2024-05-31 13:53:53 +02:00

net_connection_win_domain_ngrok_tunnel.yml

Merge PR #4702 from @nasbench - Rule tuning and updates

2024-02-12 12:29:36 +01:00

net_connection_win_domain_ngrok.yml

Merge PR #4702 from @nasbench - Rule tuning and updates

2024-02-12 12:29:36 +01:00

net_connection_win_domain_notion_api_susp_communication.yml

Merge PR #4866 from @Neo23x0 - Update network connection rules

2024-05-31 13:53:53 +02:00

net_connection_win_domain_portmap.yml

Merge PR #4866 from @Neo23x0 - Update network connection rules

2024-05-31 13:53:53 +02:00

net_connection_win_domain_telegram_api_non_browser_access.yml

Merge PR #4866 from @Neo23x0 - Update network connection rules

2024-05-31 13:53:53 +02:00

net_connection_win_domain_vscode_tunnel_connection.yml

Merge PR #4866 from @Neo23x0 - Update network connection rules

2024-05-31 13:53:53 +02:00

net_connection_win_eqnedt.yml

Merge PR #4866 from @Neo23x0 - Update network connection rules

2024-05-31 13:53:53 +02:00

net_connection_win_imewdbld.yml

Merge PR #4702 from @nasbench - Rule tuning and updates

2024-02-12 12:29:36 +01:00

net_connection_win_notepad.yml

Merge PR #4702 from @nasbench - Rule tuning and updates

2024-02-12 12:29:36 +01:00

net_connection_win_office_outbound_non_local_ip.yml

Merge PR #4888 from @nasbench - Add multiple new rules, updates and fixes

2024-07-17 11:04:05 +02:00

net_connection_win_office_uncommon_ports.yml

Merge PR #4888 from @nasbench - Add multiple new rules, updates and fixes

2024-07-17 11:04:05 +02:00

net_connection_win_python.yml

Merge PR #4942 from @nasbench - promote older rules status from experimental to test

2024-08-01 10:26:14 +02:00

net_connection_win_rdp_outbound_over_non_standard_tools.yml

Update Rules (#4872)

2024-06-25 11:26:45 +02:00

net_connection_win_rdp_reverse_tunnel.yml

Merge PR #4765 from @frack113 - Update additional rules to use the cidr modifier

2024-03-13 14:51:21 +01:00

net_connection_win_rdp_to_http.yml

Merge PR #4479 From @frack113 - Upgrade Rules Status

2023-10-17 14:35:26 +02:00

net_connection_win_regasm_network_activity.yml

Merge PR #4829 from @frack113 - Add Network Connection Initiated By RegAsm.EXE

2024-04-25 16:31:56 +02:00

net_connection_win_regsvr32_network_activity.yml

Merge PR #4702 from @nasbench - Rule tuning and updates

2024-02-12 12:29:36 +01:00

net_connection_win_rundll32_net_connections.yml

Merge PR #4765 from @frack113 - Update additional rules to use the cidr modifier

2024-03-13 14:51:21 +01:00

net_connection_win_silenttrinity_stager_msbuild_activity.yml

Order yaml field

2022-10-26 09:42:26 +02:00

net_connection_win_susp_binary_no_cmdline.yml

Merge PR #4479 From @frack113 - Upgrade Rules Status

2023-10-17 14:35:26 +02:00

net_connection_win_susp_file_sharing_domains_susp_folders.yml

Merge PR #4866 from @Neo23x0 - Update network connection rules

2024-05-31 13:53:53 +02:00

net_connection_win_susp_initiated_uncommon_or_suspicious_locations.yml

Merge PR #4866 from @Neo23x0 - Update network connection rules

2024-05-31 13:53:53 +02:00

net_connection_win_susp_malware_callback_port.yml

Merge PR #4765 from @frack113 - Update additional rules to use the cidr modifier

2024-03-13 14:51:21 +01:00

net_connection_win_susp_malware_callback_ports_uncommon.yml

Merge PR #4765 from @frack113 - Update additional rules to use the cidr modifier

2024-03-13 14:51:21 +01:00

net_connection_win_susp_outbound_kerberos_connection.yml

Merge PR #4771 from @frack113 - Fix false positive found in testing

2024-03-18 12:00:59 +01:00

net_connection_win_susp_outbound_mobsync_connection.yml

Merge PR #4765 from @frack113 - Update additional rules to use the cidr modifier

2024-03-13 14:51:21 +01:00

net_connection_win_susp_outbound_smtp_connections.yml

Merge PR #4479 From @frack113 - Upgrade Rules Status

2023-10-17 14:35:26 +02:00

net_connection_win_susp_remote_powershell_session.yml

Merge PR #4702 from @nasbench - Rule tuning and updates

2024-02-12 12:29:36 +01:00

net_connection_win_winlogon_net_connections.yml

Merge PR #4765 from @frack113 - Update additional rules to use the cidr modifier

2024-03-13 14:51:21 +01:00

net_connection_win_wordpad_uncommon_ports.yml

Merge PR #4702 from @nasbench - Rule tuning and updates

2024-02-12 12:29:36 +01:00

net_connection_win_wscript_cscript_local_connection.yml

Merge PR #4866 from @Neo23x0 - Update network connection rules

2024-05-31 13:53:53 +02:00

net_connection_win_wscript_cscript_outbound_connection.yml

Merge PR #4866 from @Neo23x0 - Update network connection rules

2024-05-31 13:53:53 +02:00

net_connection_win_wuauclt_network_connection.yml

Merge PR #4783 from @nasbench - Update registry rules logic and fix some false positives

2024-03-26 13:28:49 +01:00