security-tools/blue-team-tools
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
5da911eb848eceea855938b156da0fd3aaef6979
blue-team-tools/rules/windows
T
History
Florian Roth cb73e9725a Merge pull request #3570 from SigmaHQ/rule-devel 
IOX and NPS tunneling tools
2022-10-10 00:26:48 +02:00
..
builtin
Fix related
2022-10-09 17:28:05 +02:00
create_remote_thread
fix: filter definition
2022-09-29 14:07:38 +02:00
create_stream_hash
refactor: JuicyPotatoNG imphashes
2022-10-06 08:30:48 +02:00
dns_query
Fix related
2022-10-09 17:28:05 +02:00
driver_load
Fix related
2022-10-09 17:28:05 +02:00
file_access
Fix FP In Testing
2022-10-07 13:26:33 +02:00
file_change
Revert "Revert "Merge branch 'master' of github.com:elhoim/sigma""
2022-09-13 15:52:07 +02:00
file_delete
Update file_delete_win_sysinternals_sdelete_file_deletion.yml
2022-09-21 11:57:10 +02:00
file_event
Fix related
2022-10-09 17:28:05 +02:00
file_rename
fix: more changes
2022-10-07 22:36:21 +02:00
image_load
Fix related
2022-10-09 17:28:05 +02:00
network_connection
old experimental rule promotion
2022-10-09 16:54:04 +02:00
pipe_created
Fix related
2022-10-09 17:28:05 +02:00
powershell
Fix related
2022-10-09 17:28:05 +02:00
process_access
old experimental rule promotion
2022-10-09 16:54:04 +02:00
process_creation
Merge pull request #3570 from SigmaHQ/rule-devel
2022-10-10 00:26:48 +02:00
raw_access_thread
fix: FPs with THOR
2022-03-15 18:05:42 +01:00
registry
Fix related
2022-10-09 17:28:05 +02:00
sysmon
old experimental rule promotion
2022-10-09 16:54:04 +02:00
wmi_event
old experimental rule promotion
2022-10-09 16:54:04 +02:00