security-tools/blue-team-tools
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
6df2ba31bab3bb8104c4dad729b56c4cbef0afb4
blue-team-tools/rules
T
History
Matt Anderson 6df2ba31ba Merge PR #4919 from @MATTANDERS0N - Added new detections related BOINC 
new: Headless Process Launched Via Conhost.EXE
new: Potential BOINC Software Execution (UC-Berkeley Signature)
new: Powershell Executed From Headless ConHost Process
new: Process Launched Without Image Name
new: Renamed BOINC Client Execution 

---------

Co-authored-by: nasbench <8741929+nasbench@users.noreply.github.com>
2024-07-23 15:06:26 +02:00
..
application
Merge PR #4899 from @kelnage - Add Kubernetes rules in audit log format
2024-07-11 16:09:01 +02:00
category
Merge PR #4917 from @Neo23x0 - Update antivirus related rules
2024-07-17 16:35:51 +02:00
cloud
Merge PR #4922 from @romain-gaillard - Update Github High Risk Configuration Disabled
2024-07-22 10:43:48 +02:00
compliance
Merge PR #4681 from @nasbench - Add Missing Ref & Tags
2024-01-29 13:37:20 +01:00
linux
Merge PR #4893 from @ryanplasma - Update Microsoft references URLS
2024-07-02 12:00:11 +02:00
macos
Merge PR #4891 from @nasbench - Promote older rules status from experimental to test
2024-07-01 10:42:32 +02:00
network
Merge PR #4893 from @ryanplasma - Update Microsoft references URLS
2024-07-02 12:00:11 +02:00
web
Merge PR #4845 from @ahmedfarou22 - Proxy WebDAV Rule Improvements/New Rule
2024-05-10 16:16:42 +02:00
windows
Merge PR #4919 from @MATTANDERS0N - Added new detections related BOINC
2024-07-23 15:06:26 +02:00
README.md
chore: move more rules
2023-04-21 15:01:48 +02:00

README.md

TBD

Reference in New Issue View Git Blame Copy Permalink