security-tools/blue-team-tools
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
65ceeeea6fec56c673cf9ff6a4a9b14dc4eea191
blue-team-tools/rules/windows/builtin
T
History
frack113 271f972468 Merge PR #4538 from @frack113 - Add Sigma CLI Configuration File 
chore: add sigma-cli configuration file
fix: Suspicious Non-Browser Network Communication With Google API - Fix escaped wildcard issue and Update modifiers
fix: Uncommon PowerShell Hosts - Fix escaped wildcard issue
fix: Potential Active Directory Reconnaissance/Enumeration Via LDAP - Update logsource

---------

Co-authored-by: nasbench <8741929+nasbench@users.noreply.github.com>
2023-11-03 16:59:53 +01:00
..
application
Merge PR #4503 from @nasbench - Multiple Updates & Fixes
2023-10-28 12:55:32 +02:00
applocker
Order yaml field
2022-10-25 11:08:51 +02:00
appmodel_runtime
Merge PR #4427 from @nasbench - Multiple Fixes & Enhancements
2023-10-04 19:06:57 +02:00
appxdeployment_server
Merge PR #4482 From @nasbench - Add New Automation Workflows
2023-10-18 11:53:44 +02:00
appxpackaging_om
chore: add nextron authors tag
2023-02-01 11:14:59 +01:00
bits_client
Merge PR #4482 From @nasbench - Add New Automation Workflows
2023-10-18 11:53:44 +02:00
capi2
feat: update logsource and rule
2023-05-19 00:05:05 +02:00
certificate_services_client_lifecycle_system
feat: update logsource and rule
2023-05-19 00:05:05 +02:00
code_integrity
feat: rules update
2023-07-26 10:56:18 +02:00
diagnosis/scripted
Merge PR #4479 From @frack113 - Upgrade Rules Status
2023-10-17 14:35:26 +02:00
dns_client
Merge PR #4427 from @nasbench - Multiple Fixes & Enhancements
2023-10-04 19:06:57 +02:00
dns_server
feat: new rule related to Failed DNS Zone Transfer (#4235)
2023-05-30 15:17:58 +02:00
driverframeworks
chore: add nextron authors tag
2023-02-01 11:14:59 +01:00
firewall_as
Merge PR #4482 From @nasbench - Add New Automation Workflows
2023-10-18 11:53:44 +02:00
ldap
Merge PR #4538 from @frack113 - Add Sigma CLI Configuration File
2023-11-03 16:59:53 +01:00
lsa_server
fix: fp found in testing
2023-05-05 12:24:54 +02:00
msexchange
Merge PR #4479 From @frack113 - Upgrade Rules Status
2023-10-17 14:35:26 +02:00
ntlm
Merge PR #4479 From @frack113 - Upgrade Rules Status
2023-10-17 14:35:26 +02:00
openssh
Merge PR #4479 From @frack113 - Upgrade Rules Status
2023-10-17 14:35:26 +02:00
security
Merge PR #4533 from @nasbench - Promote experimental rules
2023-11-02 10:48:45 +01:00
security_mitigations
Merge PR #4479 From @frack113 - Upgrade Rules Status
2023-10-17 14:35:26 +02:00
servicebus
old experimental rule promotion
2022-10-09 16:54:04 +02:00
shell_core
Merge PR #4479 From @frack113 - Upgrade Rules Status
2023-10-17 14:35:26 +02:00
smbclient/security
chore: move rules to new folders (#4205)
2023-05-02 23:17:57 +02:00
system
Merge PR #4533 from @nasbench - Promote experimental rules
2023-11-02 10:48:45 +01:00
taskscheduler
Merge PR #4482 From @nasbench - Add New Automation Workflows
2023-10-18 11:53:44 +02:00
terminalservices
Merge PR #4479 From @frack113 - Upgrade Rules Status
2023-10-17 14:35:26 +02:00
windefend
Merge PR #4482 From @nasbench - Add New Automation Workflows
2023-10-18 11:53:44 +02:00
wmi
Merge PR #4482 From @nasbench - Add New Automation Workflows
2023-10-18 11:53:44 +02:00
win_alert_mimikatz_keywords.yml
chore: add nextron authors tag
2023-02-01 11:14:59 +01:00