frack113 db0de126a5 test author for Detection Rule License 1.1

2021-08-14 19:16:36 +02:00

..

zeek_dce_rpc_mitre_bzar_execution.yml

docs: MITRE ATT&CK(R) trademark references removed or adjusted

2020-09-30 08:53:52 +02:00

zeek_dce_rpc_mitre_bzar_persistence.yml

docs: MITRE ATT&CK(R) trademark references removed or adjusted

2020-09-30 08:53:52 +02:00

zeek_dce_rpc_smb_spoolss_named_pipe.yml

13 Rules from THP - Backlog Rules (old)

2020-10-13 03:33:55 -04:00

zeek_default_cobalt_strike_certificate.yml

Fixed the taxonomy

2021-06-24 21:07:52 +05:45

zeek_dns_suspicious_zbit_flag.yml

fix typo of falsepositives

2021-05-24 10:31:28 +02:00

zeek_http_executable_download_from_webdav.yml

Update zeek_http_executable_download_from_webdav.yml

2020-10-15 23:13:20 -03:00

zeek_http_exfiltration_compressed_files.yml

Fixes&improvements

2021-04-08 01:06:40 +02:00

zeek_http_webdav_put_request.yml

Fixes&improvements

2021-04-08 01:06:40 +02:00

zeek_rdp_public_listener.yml

att&ck tags review: web, network/zeek

2020-09-03 17:06:37 +03:00

zeek_smb_converted_win_atsvc_task.yml

att&ck tags review: web, network/zeek

2020-09-03 17:06:37 +03:00

zeek_smb_converted_win_impacket_secretdump.yml

Update zeek_smb_converted_win_impacket_secretdump.yml

2020-11-28 19:02:53 +01:00

zeek_smb_converted_win_lm_namedpipe.yml

att&ck tags review: web, network/zeek

2020-09-03 17:06:37 +03:00

zeek_smb_converted_win_susp_psexec.yml

Update zeek_smb_converted_win_susp_psexec.yml

2020-11-28 19:05:22 +01:00

zeek_smb_converted_win_susp_raccess_sensitive_fext.yml

Update zeek_smb_converted_win_susp_raccess_sensitive_fext.yml

2020-10-15 23:14:34 -03:00

zeek_smb_converted_win_transferring_files_with_credential_data.yml

att&ck tags review: web, network/zeek

2020-09-03 17:06:37 +03:00

zeek_susp_kerberos_rc4.yml

test author for Detection Rule License 1.1

2021-08-14 19:16:36 +02:00

zeek-dce_rpc_domain_user_enumeration.yml

att&ck tags review: web, network/zeek

2020-09-03 17:06:37 +03:00