security-tools/blue-team-tools
1
0
Fork 0
Code Issues Pull Requests Actions 45 Packages Projects Releases Wiki Activity
Files
5655f590d7f960b4dfc2668b959ece02bbe470e4
blue-team-tools/rules-threat-hunting
T
History
Swachchhanda Shrawan Poudel a15dbdaa05 Merge PR #5832 from @swachchhanda000 - fix: edr-freeze rules FPs analysed from VT 
fix: Suspicious Loading of Dbgcore/Dbghelp DLLs from Uncommon Location - remove troublesome locations commonly used by installers
fix: HackTool - WSASS Execution - update regex to avoid mismatching on legitimate cli
update: WerFaultSecure Loading DbgCore or DbgHelp - EDR-Freeze - change it into hunting rule
2026-03-19 10:26:30 +01:00
..
cloud
Merge PR #5844 from @marcopedrinazzi - Add Inbox Rules Creation Or Update Activity in O365
2026-02-28 14:32:33 +01:00
linux
Merge PR #5627 from @tsale - Filename with Embedded Base64 Commands
2025-11-24 15:33:42 +01:00
macos
Merge PR #5448 from @nasbench - Promote older rules status from experimental to test
2025-06-02 13:29:48 +02:00
network
Merge PR #5588 from @ norbert791 - Low Reputation Effective Top-Level Domain (eTLD)
2025-09-22 12:26:22 +02:00
web/proxy_generic
Merge PR #4950 from @nasbench - Comply With v2 Spec Changes
2024-08-12 12:02:50 +02:00
windows
Merge PR #5832 from @swachchhanda000 - fix: edr-freeze rules FPs analysed from VT
2026-03-19 10:26:30 +01:00
README.md
chore: move more rules
2023-04-21 15:01:48 +02:00

README.md

TBD

Reference in New Issue View Git Blame Copy Permalink