security-tools/blue-team-tools
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
4eccac596567042be95e5b246d36d3c15e046ede
blue-team-tools/rules
T
History
RG9n 4eccac5965 Merge PR from #4736 @RG9n - Add/Update ScreenConnect RMM Related Rules 
new: Remote Access Tool - ScreenConnect Server Web Shell Execution
update: Remote Access Tool - ScreenConnect Installation Execution - Reduce level to medium
update: Remote Access Tool - ScreenConnect Potential Suspicious Remote Command Execution - Update logic and reduce the level to medium
update: Remote Access Tool - ScreenConnect Remote Command Execution - Hunting - Move the rule to Hunting
update: Remote Access Tool - ScreenConnect Remote Command Execution - Reduce level to low 

---------

Co-authored-by: nasbench <8741929+nasbench@users.noreply.github.com>
2024-02-26 16:55:58 +01:00
..
application
chore: promote older rules status from experimental to test (#4651)
2024-01-01 09:00:51 +01:00
category
Merge PR #4533 from @nasbench - Promote experimental rules
2023-11-02 10:48:45 +01:00
cloud
Merge PR #4700 from @nasbench - Promote older rules status from experimental to test
2024-02-01 02:09:31 +01:00
compliance
Merge PR #4681 from @nasbench - Add Missing Ref & Tags
2024-01-29 13:37:20 +01:00
linux
Merge PR #4700 from @nasbench - Promote older rules status from experimental to test
2024-02-01 02:09:31 +01:00
macos
Merge PR #4700 from @nasbench - Promote older rules status from experimental to test
2024-02-01 02:09:31 +01:00
network
Merge PR #4681 from @nasbench - Add Missing Ref & Tags
2024-01-29 13:37:20 +01:00
web
Merge PR #4721 from @MalGamy - Add UA used by RedCurl APT
2024-02-15 11:27:43 +01:00
windows
Merge PR from #4736 @RG9n - Add/Update ScreenConnect RMM Related Rules
2024-02-26 16:55:58 +01:00
README.md
chore: move more rules
2023-04-21 15:01:48 +02:00

README.md

TBD

Reference in New Issue View Git Blame Copy Permalink