security-tools/blue-team-tools
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
76f4a42ebb462a066f960d8a034a90fc7465e411
blue-team-tools/rules
T
History
Swachchhanda Shrawan Poudel 76f4a42ebb Merge PR #5854 from @swachchhanda000 - Add Notepad++ Infrastructure Abuse Rules 
new: Notepad++ Updater DNS Query to Uncommon Domains
new: Uncommon File Created by Notepad++ Updater Gup.EXE
new: Suspicious Child Process of Notepad++ Updater - GUP.Exe

---------

Co-authored-by: nasbench <nbencher@cisco.com>
Co-authored-by: phantinuss <79651203+phantinuss@users.noreply.github.com>
2026-02-04 12:08:03 +01:00
..
application
Merge PR #5826 from @marcopedrinazzi - Add New OpenCanary Rules
2026-01-24 12:32:10 +01:00
category
Merge PR #5477 from @phantinuss - chore: update MITRE tag t1219 to t1219.002
2025-06-13 10:00:52 +02:00
cloud
Merge PR #5799 from @nasbench - Update logic to use errorCode instead for better mapping and accuracy
2025-12-09 10:17:50 +01:00
identity
Merge PR #5738 from @nasbench - rename folders and update readme
2025-11-03 10:35:44 +01:00
linux
Merge PR #5771 from @EzLucky - Add and Update Setcap Related Rules
2026-01-24 11:51:42 +01:00
macos
Merge PR #5791 from @Niicolaa - fix: add correct osascript path
2025-12-09 08:03:04 +05:45
network
Merge PR #5823 from @darses - Update DNS Query to External Service Interaction Domains
2026-01-24 12:37:27 +01:00
web
Merge PR #5769 from @nasbench - fix keywords rule and remove the fields field
2025-11-24 09:54:29 +01:00
windows
Merge PR #5854 from @swachchhanda000 - Add Notepad++ Infrastructure Abuse Rules
2026-02-04 12:08:03 +01:00
README.md
chore: move more rules
2023-04-21 15:01:48 +02:00

README.md

TBD

Reference in New Issue View Git Blame Copy Permalink