security-tools/blue-team-tools
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
7ae76b8d9906d3c33ed7a2c6bd276777560fa2d2
blue-team-tools/rules/windows
T
History
e6e6e 7ae76b8d99 Revert "att&ck tags review: windows/process_creation part 5" 
This reverts commit e94c47e74e.
2020-09-07 01:28:08 +04:00
..
builtin
fix modified field
2020-08-25 01:29:57 +02:00
deprecated
fix: buggy rule
2020-05-23 18:32:02 +02:00
driver_load
att&ck tags review: windows/builtin, windows/driver_load, windows/file_event, windows/image_load, windows/other
2020-08-25 01:09:17 +02:00
file_event
att&ck tags review: windows/builtin, windows/driver_load, windows/file_event, windows/image_load, windows/other
2020-08-25 01:09:17 +02:00
image_load
att&ck tags review: windows/builtin, windows/driver_load, windows/file_event, windows/image_load, windows/other
2020-08-25 01:09:17 +02:00
malware
Further subtechnique updates
2020-06-17 11:31:40 -06:00
network_connection
added missing ATT&CK v6.3 IDs with comments and removed unnecessary "modified" attributes
2020-08-25 23:51:22 +00:00
other
fix modified field
2020-08-25 01:29:57 +02:00
powershell
added missing ATT&CK v6.3 IDs with comments and removed unnecessary "modified" attributes
2020-08-25 23:51:22 +00:00
process_access
added missing ATT&CK v6.3 IDs with comments and removed unnecessary "modified" attributes
2020-08-25 23:51:22 +00:00
process_creation
Revert "att&ck tags review: windows/process_creation part 5"
2020-09-07 01:28:08 +04:00
registry_event
att&ck tags review: windows/registry_event
2020-09-06 22:10:44 +03:00
sysmon
Revert "att&ck tags review: windows/process_creation part 5"
2020-09-07 01:28:08 +04:00