blue-team-tools

Files

T

Swachchhanda Shrawan Poudel 57c71b3b8a Merge PR #5778 from @swachchhanda000 - fix: add some filters or tune rules to reduce false positives

fix: Suspicious desktop.ini Action - filter onedrive
fix: CredUI.DLL Loaded By Uncommon Process - filter systemapps
update: Renamed Office Binary Execution - add olk.exe matching on Microsoft Outlook

2025-12-09 08:15:03 +05:45

application

Merge PR #5738 from @nasbench - rename folders and update readme

2025-11-03 10:35:44 +01:00

category

Merge PR #5477 from @phantinuss - chore: update MITRE tag t1219 to t1219.002

2025-06-13 10:00:52 +02:00

cloud

Merge PR #5536 from @suKTech24 - Add AWS GuardDuty Detector Deleted Or Updated

2025-11-28 10:33:03 +01:00

identity

Merge PR #5738 from @nasbench - rename folders and update readme

2025-11-03 10:35:44 +01:00

linux

Merge PR #5793 from @nasbench - Rename Auditd Folder Entries and update SYSCALL field

2025-12-08 16:03:55 +01:00

macos

Merge PR #5791 from @Niicolaa - fix: add correct osascript path

2025-12-09 08:03:04 +05:45

network

Merge PR #5724 from @darses - update DNS Query to External Service Interaction Domains

2025-11-26 11:52:21 +01:00

web

Merge PR #5769 from @nasbench - fix keywords rule and remove the fields field

2025-11-24 09:54:29 +01:00

windows

Merge PR #5778 from @swachchhanda000 - fix: add some filters or tune rules to reduce false positives

2025-12-09 08:15:03 +05:45

README.md

chore: move more rules

2023-04-21 15:01:48 +02:00

README.md

TBD