frack113 9f7d4a832e Update sysmon_mal_namedpipes.yml

2021-10-31 07:03:27 +01:00

..

pipe_created_tool_psexec.yml

Adding some additional details about sysmon config and also way to test detection.

2021-10-25 21:30:33 +02:00

sysmon_alternate_powershell_hosts_pipe.yml

Update Threat Hunter Playbook Reference

2021-05-22 01:02:43 -03:00

sysmon_apt_turla_namedpipes.yml

Adding some additional details about sysmon config and also way to test detection.

2021-10-25 21:30:33 +02:00

sysmon_cred_dump_tools_named_pipes.yml

Adding some additional details about sysmon config and also way to test detection.

2021-10-25 21:30:33 +02:00

sysmon_efspotato_namedpipe.yml

Adding some additional details about sysmon config and also way to test detection.

2021-10-25 21:30:33 +02:00

sysmon_mal_cobaltstrike_re.yml

Adding some additional details about sysmon config and also way to test detection.

2021-10-25 21:30:33 +02:00

sysmon_mal_cobaltstrike.yml

Adding some additional details about sysmon config and also way to test detection.

2021-10-25 21:30:33 +02:00

sysmon_mal_namedpipes.yml

Update sysmon_mal_namedpipes.yml

2021-10-31 07:03:27 +01:00

sysmon_powershell_execution_pipe.yml

Clean-up service: sysmon as it will be replaced by filling the category

2021-04-15 02:02:25 +02:00

sysmon_psexec_pipes_artifacts.yml

Adding some additional details about sysmon config and also way to test detection.

2021-10-25 21:30:33 +02:00

sysmon_susp_adfs_namedpipe_connection.yml

added rule to detect suspicious named pipe connections to an AD FS server

2021-10-08 01:57:22 -04:00

sysmon_susp_cobaltstrike_pipe_patterns.yml

Adding some additional details about sysmon config and also way to test detection.

2021-10-25 21:30:33 +02:00

sysmon_susp_wmi_consumer_namedpipe.yml

Adding some additional details about sysmon config and also way to test detection.

2021-10-25 21:30:33 +02:00