Ryan Plas 1d40f1d20b Merge PR #4893 from @ryanplasma - Update Microsoft references URLS ...

chore: update Microsoft references link to use the "learn" subdomain instead of "docs". 

---------

Co-authored-by: nasbench <8741929+nasbench@users.noreply.github.com>
Thanks: @ryanplasma

2024-07-02 12:00:11 +02:00

..

posh_pm_active_directory_module_dll_import.yml

Merge PR #4611 from @nasbench - Promote Older Rules Status From experimental To test

2023-12-01 12:50:36 +01:00

posh_pm_alternate_powershell_hosts.yml

feat: new rules, updates and goofy guineapig stuff (#4229)

2023-05-15 15:53:39 +02:00

posh_pm_bad_opsec_artifacts.yml

Merge PR #4482 From @nasbench - Add New Automation Workflows

2023-10-18 11:53:44 +02:00

posh_pm_clear_powershell_history.yml

Merge PR #4479 From @frack113 - Upgrade Rules Status

2023-10-17 14:35:26 +02:00

posh_pm_decompress_commands.yml

feat: new rules, updates and goofy guineapig stuff (#4229)

2023-05-15 15:53:39 +02:00

posh_pm_exploit_scripts.yml

Merge PR #4681 from @nasbench - Add Missing Ref & Tags

2024-01-29 13:37:20 +01:00

posh_pm_get_addbaccount.yml

feat: new rules, updates and goofy guineapig stuff (#4229)

2023-05-15 15:53:39 +02:00

posh_pm_get_clipboard.yml

Merge PR #4533 from @nasbench - Promote experimental rules

2023-11-02 10:48:45 +01:00

posh_pm_hktl_evil_winrm_execution.yml

Update Rules (#4872)

2024-06-25 11:26:45 +02:00

posh_pm_invoke_obfuscation_clip.yml

Merge PR #4803 from @frack113 - Update regex based rules

2024-04-15 16:37:15 +02:00

posh_pm_invoke_obfuscation_obfuscated_iex.yml

Merge PR #4533 from @nasbench - Promote experimental rules

2023-11-02 10:48:45 +01:00

posh_pm_invoke_obfuscation_stdin.yml

Merge PR #4803 from @frack113 - Update regex based rules

2024-04-15 16:37:15 +02:00

posh_pm_invoke_obfuscation_var.yml

Merge PR #4803 from @frack113 - Update regex based rules

2024-04-15 16:37:15 +02:00

posh_pm_invoke_obfuscation_via_compress.yml

Merge PR #4482 From @nasbench - Add New Automation Workflows

2023-10-18 11:53:44 +02:00

posh_pm_invoke_obfuscation_via_rundll.yml

Merge PR #4482 From @nasbench - Add New Automation Workflows

2023-10-18 11:53:44 +02:00

posh_pm_invoke_obfuscation_via_stdin.yml

Merge PR #4803 from @frack113 - Update regex based rules

2024-04-15 16:37:15 +02:00

posh_pm_invoke_obfuscation_via_use_clip.yml

Merge PR #4803 from @frack113 - Update regex based rules

2024-04-15 16:37:15 +02:00

posh_pm_invoke_obfuscation_via_use_mhsta.yml

Merge PR #4533 from @nasbench - Promote experimental rules

2023-11-02 10:48:45 +01:00

posh_pm_invoke_obfuscation_via_use_rundll32.yml

Merge PR #4479 From @frack113 - Upgrade Rules Status

2023-10-17 14:35:26 +02:00

posh_pm_invoke_obfuscation_via_var.yml

Merge PR #4803 from @frack113 - Update regex based rules

2024-04-15 16:37:15 +02:00

posh_pm_malicious_commandlets.yml

Merge PR #4681 from @nasbench - Add Missing Ref & Tags

2024-01-29 13:37:20 +01:00

posh_pm_remote_powershell_session.yml

Merge PR #4681 from @nasbench - Add Missing Ref & Tags

2024-01-29 13:37:20 +01:00

posh_pm_remotefxvgpudisablement_abuse.yml

Merge PR #4791 from @nasbench - Promote older rules status from experimental to test

2024-04-01 15:14:10 +02:00

posh_pm_susp_ad_group_reco.yml

Merge PR #4482 From @nasbench - Add New Automation Workflows

2023-10-18 11:53:44 +02:00

posh_pm_susp_download.yml

Merge PR #4681 from @nasbench - Add Missing Ref & Tags

2024-01-29 13:37:20 +01:00

posh_pm_susp_get_nettcpconnection.yml

Merge PR #4479 From @frack113 - Upgrade Rules Status

2023-10-17 14:35:26 +02:00

posh_pm_susp_invocation_generic.yml

Merge PR #4681 from @nasbench - Add Missing Ref & Tags

2024-01-29 13:37:20 +01:00

posh_pm_susp_invocation_specific.yml

Merge PR #4681 from @nasbench - Add Missing Ref & Tags

2024-01-29 13:37:20 +01:00

posh_pm_susp_local_group_reco.yml

Merge PR #4482 From @nasbench - Add New Automation Workflows

2023-10-18 11:53:44 +02:00

posh_pm_susp_reset_computermachinepassword.yml

Merge PR #4893 from @ryanplasma - Update Microsoft references URLS

2024-07-02 12:00:11 +02:00

posh_pm_susp_smb_share_reco.yml

Merge PR #4479 From @frack113 - Upgrade Rules Status

2023-10-17 14:35:26 +02:00

posh_pm_susp_zip_compress.yml

Merge PR #4631 from @nasbench - add rules related to CISA aa23-347a advisory and other updates

2023-12-18 16:46:46 +01:00

posh_pm_syncappvpublishingserver_exe.yml

Merge PR #4479 From @frack113 - Upgrade Rules Status

2023-10-17 14:35:26 +02:00