blue-team-tools/rules at 503bd67fca163ea520cb8b3d4bb507592bc970f9 - blue-team-tools - GreySec Git

security-tools/blue-team-tools

Files

T

History

Florian Roth 5d1cf4b9de Merge PR #5076 from @Neo23x0 - Fix Suspicious SYSTEM User Process Creation

fix: Suspicious SYSTEM User Process Creation - filter false positives with Google Updater uninstall script

2024-11-13 23:21:16 +01:00

..

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

Merge PR #5068 from @ruppde - Update rules in the Antivirus category with additional strings and signature names

2024-11-04 11:45:07 +01:00

Merge PR #4991 from @nasbench - Promote older rules status from experimental to test

2024-09-02 10:01:36 +02:00

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

Merge PR #5042 from @wieso-itzi - Update Python PTY rules

2024-11-04 12:15:00 +01:00

Merge PR #5065 from @nasbench - Promote older rules status from experimental to test

2024-11-01 10:21:04 +01:00

Merge PR #5064 from @Koifman - Add missing ATT&CK tag to Monero Crypto Coin Mining Pool Lookup

2024-11-04 11:32:02 +01:00

Merge PR #5027 from @nasbench - Promote older rules status from experimental to test

2024-10-01 14:56:09 +02:00

Merge PR #5076 from @Neo23x0 - Fix Suspicious SYSTEM User Process Creation

2024-11-13 23:21:16 +01:00

README.md

chore: move more rules

2023-04-21 15:01:48 +02:00

README.md

TBD