security-tools/blue-team-tools
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
6d8a4571cdeb16e8f84211bc3a77e5d115659129
blue-team-tools/rules/windows/builtin
T
History
Nasreddine Bencherchali 0a51dcdf5c fix: rename rule to reflect new title
2022-11-10 18:24:36 +01:00
..
application
Order yaml field
2022-10-25 11:08:51 +02:00
applocker
Order yaml field
2022-10-25 11:08:51 +02:00
bits_client
Order yaml field
2022-10-25 11:08:51 +02:00
code_integrity
fix: rename rule to reflect new title
2022-11-10 18:24:36 +01:00
diagnosis/scripted
Order yaml field
2022-10-25 11:08:51 +02:00
dns_server
Order yaml field
2022-10-25 11:08:51 +02:00
driverframeworks
Order yaml field
2022-10-25 11:08:51 +02:00
firewall_as
fix: new FPs found in testing environment
2022-11-01 16:19:14 +01:00
ldap
old experimental rule promotion
2022-10-09 16:54:04 +02:00
msexchange
Add/Update Exchange/Mailbox Rules
2022-10-26 23:17:54 +02:00
ntlm
Order yaml field
2022-10-25 11:08:51 +02:00
openssh
Change rule service
2022-10-25 20:03:11 +02:00
printservice
Order yaml field
2022-10-25 11:08:51 +02:00
security
Rule add: windows access token abuse (#3675)
2022-11-09 09:43:15 +01:00
security_mitigations
update modified tag
2022-09-28 06:32:34 +09:00
servicebus
old experimental rule promotion
2022-10-09 16:54:04 +02:00
shell_core
Order yaml field
2022-10-25 11:08:51 +02:00
smbclient
Order yaml field
2022-10-25 11:08:51 +02:00
system
fix: fp with defender def updates
2022-11-10 17:15:22 +01:00
taskscheduler
Order yaml field
2022-10-25 11:08:51 +02:00
terminalservices
Order yaml field
2022-10-25 11:08:51 +02:00
windefend
Order yaml field
2022-10-25 11:08:51 +02:00
wmi
Order yaml field
2022-10-25 11:08:51 +02:00
win_alert_mimikatz_keywords.yml
Order yaml field
2022-10-25 11:08:51 +02:00