Logo
Explore Help
Sign In
security-tools/blue-team-tools
1
0
Fork 0
You've already forked blue-team-tools
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
63fb31882ea4ea5258f21ee50eaac2aa867f1a7f
blue-team-tools/rules/windows
T
History
Bhabesh Rai 63fb31882e Added rule for Impacket's PsExec execution
2020-12-14 12:48:26 +05:45
..
builtin
Added rule for Impacket's PsExec execution
2020-12-14 12:48:26 +05:45
deprecated
fix: buggy rule
2020-05-23 18:32:02 +02:00
driver_load
att&ck tags review: windows/builtin, windows/driver_load, windows/file_event, windows/image_load, windows/other
2020-08-25 01:09:17 +02:00
file_event
Merge pull request #989 from oscd-initiative/master
2020-09-08 13:27:58 +02:00
image_load
Merge pull request #989 from oscd-initiative/master
2020-09-08 13:27:58 +02:00
malware
Further subtechnique updates
2020-06-17 11:31:40 -06:00
network_connection
added missing ATT&CK v6.3 IDs with comments and removed unnecessary "modified" attributes
2020-08-25 23:51:22 +00:00
other
Windows Defender AMSI Trigger Detected
2020-09-14 18:10:38 +05:45
powershell
added missing ATT&CK v6.3 IDs with comments and removed unnecessary "modified" attributes
2020-08-25 23:51:22 +00:00
process_access
Added Credential Dumping by LaZagne
2020-09-09 18:27:14 +05:45
process_creation
Merge pull request #989 from oscd-initiative/master
2020-09-08 13:27:58 +02:00
registry_event
att&ck tags review: windows/registry_event
2020-09-06 22:10:44 +03:00
sysmon
Revert "att&ck tags review: windows/process_creation part 5"
2020-09-07 01:28:08 +04:00
Powered by Gitea Version: 1.26.1 Page: 125ms Template: 12ms
Auto
English
Bahasa Indonesia Deutsch English Español Français Gaeilge Italiano Latviešu Magyar nyelv Nederlands Polski Português de Portugal Português do Brasil Suomi Svenska Türkçe Čeština Ελληνικά Български Русский Українська فارسی മലയാളം 日本語 简体中文 繁體中文(台灣) 繁體中文(香港) 한국어
Licenses API