frack113 f7b159350d Merge pull request #3954 from nasbench/nasbench-rule-devel ...

feat: updates and enhancements

2023-01-25 13:21:44 +01:00

..

auth

Change rules using all of required-lists to |all

2023-01-23 14:37:25 +00:00

clamav

Filename normalisation

2023-01-07 08:52:11 +01:00

cron

Filename normalisation

2023-01-07 08:52:11 +01:00

guacamole

Filename normalisation

2023-01-07 08:52:11 +01:00

sshd

Filename normalisation

2023-01-07 08:52:11 +01:00

sudo

order linux file

2023-01-05 08:14:19 +01:00

syslog

Filename normalisation

2023-01-07 08:52:11 +01:00

vsftpd

Filename normalisation

2023-01-07 08:52:11 +01:00

lnx_apt_equationgroup_lnx.yml

Order yaml field

2022-10-25 08:53:44 +02:00

lnx_buffer_overflows.yml

Order yaml field

2022-10-25 08:53:44 +02:00

lnx_clear_syslog.yml

Update Title (#3731)

2022-11-27 19:19:27 +01:00

lnx_file_copy.yml

Order yaml field

2022-10-25 08:53:44 +02:00

lnx_ldso_preload_injection.yml

old experimental rule promotion

2022-10-09 16:54:04 +02:00

lnx_nimbuspwn_privilege_escalation_exploit.yml

Change rules using all of required-lists to |all

2023-01-23 14:37:25 +00:00

lnx_potential_susp_ebpf_activity.yml

fix: rule logic

2023-01-25 12:03:11 +01:00

lnx_privileged_user_creation.yml

fix: improve overall structure

2022-12-21 20:40:29 +01:00

lnx_shell_clear_cmd_history.yml

Remove mitre url

2023-01-10 18:09:04 +01:00

lnx_shell_priv_esc_prep.yml

Update lnx_shell_priv_esc_prep.yml

2022-11-01 12:32:46 +01:00

lnx_shell_susp_commands.yml

Order yaml field

2022-10-25 08:53:44 +02:00

lnx_shell_susp_log_entries.yml

fix: add removed comments

2022-11-17 00:57:24 +01:00

lnx_shell_susp_rev_shells.yml

Order yaml field

2022-10-25 08:53:44 +02:00

lnx_shellshock.yml

old experimental rule promotion

2022-10-09 16:54:04 +02:00

lnx_space_after_filename_.yml

Order yaml field

2022-10-25 08:53:44 +02:00

lnx_susp_dev_tcp.yml

fix: broken selections

2023-01-06 17:28:29 +01:00

lnx_susp_jexboss.yml

Order yaml field

2022-10-25 08:53:44 +02:00

lnx_symlink_etc_passwd.yml

Order yaml field

2022-10-25 08:53:44 +02:00