blue-team-tools/rules at 71ae004b32bb3c7fb04714f8a051fc8e5edda68c - blue-team-tools - GreySec Git

security-tools/blue-team-tools

Files

T

History

phantinuss 3e389b1ffd Merge PR #4788 from @phantinuss - fix: regularly loaded by wsmprovhost.exe

update: Suspicious Volume Shadow Copy VSS_PS.dll Load - regularly loaded by wsmprovhost.exe

2024-04-02 09:27:58 +02:00

..

Merge PR #4694 from @LAripping - Add native Kubernetes detections

2024-03-26 18:26:46 +01:00

Merge PR #4533 from @nasbench - Promote experimental rules

2023-11-02 10:48:45 +01:00

Merge PR #4791 from @nasbench - Promote older rules status from experimental to test

2024-04-01 15:14:10 +02:00

Merge PR #4681 from @nasbench - Add Missing Ref & Tags

2024-01-29 13:37:20 +01:00

Merge PR #4791 from @nasbench - Promote older rules status from experimental to test

2024-04-01 15:14:10 +02:00

Merge PR #4759 from @joshnck - Add new rules covering incoming TeamViewer connection activity

2024-03-15 21:41:29 +01:00

Merge PR #4765 from @frack113 - Update additional rules to use the cidr modifier

2024-03-13 14:51:21 +01:00

Merge PR #4791 from @nasbench - Promote older rules status from experimental to test

2024-04-01 15:14:10 +02:00

Merge PR #4788 from @phantinuss - fix: regularly loaded by wsmprovhost.exe

2024-04-02 09:27:58 +02:00

README.md

chore: move more rules

2023-04-21 15:01:48 +02:00

README.md

TBD