Logo
Explore Help
Sign In
security-tools/blue-team-tools
1
0
Fork 0
You've already forked blue-team-tools
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
596d1b6e4ce24c0d2f3c6def38f5d02b5c2bfb2e
blue-team-tools/rules/windows/process_access
T
History
Yugoslavskiy Daniil 1fc202fe5d fix typos, update tags
2020-09-13 15:46:45 +02:00
..
sysmon_cmstp_execution.yml
added missing ATT&CK v6.3 IDs with comments and removed unnecessary "modified" attributes
2020-08-25 23:51:22 +00:00
sysmon_cred_dump_lsass_access.yml
att&ck tags review: windows/powershell, windows/process_access, windows/network_connection
2020-08-24 23:31:26 +00:00
sysmon_in_memory_assembly_execution.yml
att&ck tags review: windows/powershell, windows/process_access, windows/network_connection
2020-08-24 23:31:26 +00:00
sysmon_invoke_phantom.yml
fix typos, update tags
2020-09-13 15:46:45 +02:00
sysmon_lazagne_cred_dump_lsass_access.yml
Added Credential Dumping by LaZagne
2020-09-09 18:27:14 +05:45
sysmon_lsass_memdump.yml
att&ck tags review: windows/powershell, windows/process_access, windows/network_connection
2020-08-24 23:31:26 +00:00
sysmon_malware_verclsid_shellcode.yml
added missing ATT&CK v6.3 IDs with comments and removed unnecessary "modified" attributes
2020-08-25 23:51:22 +00:00
sysmon_mimikatz_trough_winrm.yml
added missing ATT&CK v6.3 IDs with comments and removed unnecessary "modified" attributes
2020-08-25 23:51:22 +00:00
Powered by Gitea Version: 1.26.1 Page: 21ms Template: 6ms
Auto
English
Bahasa Indonesia Deutsch English Español Français Gaeilge Italiano Latviešu Magyar nyelv Nederlands Polski Português de Portugal Português do Brasil Suomi Svenska Türkçe Čeština Ελληνικά Български Русский Українська فارسی മലയാളം 日本語 简体中文 繁體中文(台灣) 繁體中文(香港) 한국어
Licenses API