blue-team-tools

security-tools/blue-team-tools

Fork 0

Files

T

History

Swachchhanda Shrawan Poudel 7509f6ab6b

Create Release / Create Release (push) Has been cancelled

Details

Merge PR #4698 from @swachchhanda000 - Added rules that detect possible activities associated with services and modules enumeration

new: Interesting Service Enumeration Via Sc.EXE
new: Loaded Module Enumeration Via Tasklist.EXE
fix: SC.EXE Query Execution - Add keybase filter 

---------

Co-authored-by: nasbench <8741929+nasbench@users.noreply.github.com>

2024-02-12 14:45:36 +01:00

application

chore: promote older rules status from experimental to test (#4651 )

2024-01-01 09:00:51 +01:00

category

Merge PR #4533 from @nasbench - Promote experimental rules

2023-11-02 10:48:45 +01:00

cloud

Merge PR #4700 from @nasbench - Promote older rules status from experimental to test

2024-02-01 02:09:31 +01:00

compliance

Merge PR #4681 from @nasbench - Add Missing Ref & Tags

2024-01-29 13:37:20 +01:00

linux

Merge PR #4700 from @nasbench - Promote older rules status from experimental to test

2024-02-01 02:09:31 +01:00

macos

Merge PR #4700 from @nasbench - Promote older rules status from experimental to test

2024-02-01 02:09:31 +01:00

network

Merge PR #4681 from @nasbench - Add Missing Ref & Tags

2024-01-29 13:37:20 +01:00

web

Merge PR #4700 from @nasbench - Promote older rules status from experimental to test

2024-02-01 02:09:31 +01:00

windows

Merge PR #4698 from @swachchhanda000 - Added rules that detect possible activities associated with services and modules enumeration

2024-02-12 14:45:36 +01:00

README.md

chore: move more rules

2023-04-21 15:01:48 +02:00

README.md

TBD