Files
blue-team-tools/rules
Feathers 60ac757cf2 Create net_connection_win_dead_drop_resolvers.yml
This detection is an attempt to spot dead drop resolvers for ones which don't have packet inspection. Most often dead drop resolvers are initiated from malware itself which makes it easy to detect since most often users access social media websites from internet browsers.
2022-08-17 16:09:11 +02:00
..
2022-07-11 18:12:51 +01:00
2022-01-19 18:23:30 +01:00
2022-07-11 20:27:42 +01:00
2022-08-15 00:22:08 +01:00