Logo
Explore Help
Sign In
security-tools/blue-team-tools
1
0
Fork 0
You've already forked blue-team-tools
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
76910eaee48bceed5308b7013f035d019d0612bb
blue-team-tools/rules/windows
T
History
Florian Roth 79adaceffa Merge pull request #979 from barvhaim/patch-3
Update win_susp_rasdial_activity.yml to use `contains` instead of `equal`
2020-08-18 15:08:15 +02:00
..
builtin
Merge pull request #952 from Neo23x0/devel
2020-07-28 10:21:59 +02:00
deprecated
fix: buggy rule
2020-05-23 18:32:02 +02:00
driver_load
fix: bugfix and cosmetics
2020-06-24 18:10:58 +02:00
file_event
add wmi persistence script event consumer false positive
2020-07-20 12:27:16 +08:00
image_load
Updated tags to include sub-techniques
2020-07-18 02:50:57 +01:00
malware
Further subtechnique updates
2020-06-17 11:31:40 -06:00
network_connection
Updated tags to include sub-techniques
2020-07-18 02:50:57 +01:00
other
Updated to include extra registry key
2020-07-18 02:37:11 +01:00
powershell
Merge branch 'master' of github.com:Neo23x0/sigma
2020-07-15 10:27:33 -04:00
process_access
Updated invoke_phantom with sub-technique mapping
2020-07-18 02:32:42 +01:00
process_creation
Update win_susp_rasdial_activity.yml
2020-08-18 14:40:37 +02:00
registry_event
remove false positives in Windows being too broad and add specific keys looked at + add keys from wow64
2020-08-18 05:28:37 -04:00
sysmon
Merge pull request #928 from duzvik/master
2020-08-12 17:15:27 +02:00
Powered by Gitea Version: 1.26.1 Page: 71ms Template: 5ms
Auto
English
Bahasa Indonesia Deutsch English Español Français Gaeilge Italiano Latviešu Magyar nyelv Nederlands Polski Português de Portugal Português do Brasil Suomi Svenska Türkçe Čeština Ελληνικά Български Русский Українська فارسی മലയാളം 日本語 简体中文 繁體中文(台灣) 繁體中文(香港) 한국어
Licenses API