Files
blue-team-tools/rules/windows/file
Mohamed Ashraf cc3011b814 Merge PR #4543 from @X-Junior - Add & Update Multiple Rules
new: Enable Remote Connection Between Anonymous Computer - AllowAnonymousCallback
update: Weak or Abused Passwords In CLI - Increase coverage
update: Malware User Agent - Increase UAs coverage
update: Potentially Suspicious Cabinet File Expansion - Increase coverage
update: HackTool - CrackMapExec - Fix logic
update: Port Forwarding Activity Via SSH.EXE - Increase coverage
update: Suspicious File Creation Activity From Fake Recycle.Bin Folder - Increase coverage
update: Suspicious Process Execution From Fake Recycle.Bin Folder  - Increase coverage

---------

Co-authored-by: Nasreddine Bencherchali <8741929+nasbench@users.noreply.github.com>
Co-authored-by: phantinuss <79651203+phantinuss@users.noreply.github.com>
2023-11-06 14:13:31 +01:00
..