security-tools/blue-team-tools
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity
Files
593abb1cce6e0813670ca3c780375f37b2e528f1
blue-team-tools/rules/windows/powershell
T
History
Thomas Patzke 593abb1cce OSCD QA wave 3
2020-02-02 12:41:12 +01:00
..
powershell_alternate_powershell_hosts.yml
OSCD QA wave 2
2020-01-17 15:46:28 +01:00
powershell_clear_powershell_history.yml
UUIDs + moved unsupported logic
2019-12-19 23:56:36 +01:00
powershell_data_compressed.yml
Data Compressed duplciate titles
2019-12-09 16:24:10 +00:00
powershell_dnscat_execution.yml
OSCD QA wave 3
2020-02-02 12:41:12 +01:00
powershell_downgrade_attack.yml
Added UUIDs to rules
2019-11-12 23:12:27 +01:00
powershell_exe_calling_ps.yml
Added UUIDs to rules
2019-11-12 23:12:27 +01:00
powershell_invoke_obfuscation_obfuscated_iex.yml
UUIDs + moved unsupported logic
2019-12-19 23:56:36 +01:00
powershell_malicious_commandlets.yml
Added UUIDs to rules
2019-11-12 23:12:27 +01:00
powershell_malicious_keywords.yml
Added UUIDs to rules
2019-11-12 23:12:27 +01:00
powershell_ntfs_ads_access.yml
Added UUIDs to rules
2019-11-12 23:12:27 +01:00
powershell_prompt_credentials.yml
Added UUIDs to rules
2019-11-12 23:12:27 +01:00
powershell_psattack.yml
Added UUIDs to rules
2019-11-12 23:12:27 +01:00
powershell_remote_powershell_session.yml
OSCD QA wave 3
2020-02-02 12:41:12 +01:00
powershell_shellcode_b64.yml
Added UUIDs to rules
2019-11-12 23:12:27 +01:00
powershell_suspicious_download.yml
Added UUIDs to rules
2019-11-12 23:12:27 +01:00
powershell_suspicious_invocation_generic.yml
Added UUIDs to rules
2019-11-12 23:12:27 +01:00
powershell_suspicious_invocation_specific.yml
Added UUIDs to rules
2019-11-12 23:12:27 +01:00
powershell_suspicious_keywords.yml
UUIDs + moved unsupported logic
2019-12-19 23:56:36 +01:00
powershell_winlogon_helper_dll.yml
Added UUIDs to rules
2019-11-12 23:12:27 +01:00