BlueTeamOps 7b90c00a45 feat: add new rules related to cloudflared usage (#4243)

2023-05-17 17:21:23 +02:00

..

builtin

Merge pull request #4218 from nasbench/fin7-rules

2023-05-09 16:14:26 +02:00

create_remote_thread

feat: update author and selection

2023-05-05 18:25:07 +02:00

create_stream_hash

feat: new rules, updates and goofy guineapig stuff (#4229)

2023-05-15 15:53:39 +02:00

dns_query

feat: new rules, updates and goofy guineapig stuff (#4229)

2023-05-15 15:53:39 +02:00

driver_load

feat: new rules, updates and goofy guineapig stuff (#4229)

2023-05-15 15:53:39 +02:00

file

feat: new rules, updates and goofy guineapig stuff (#4229)

2023-05-15 15:53:39 +02:00

image_load

fix: specify image and loaded image

2023-05-16 15:37:13 +02:00

network_connection

feat: new rules, updates and goofy guineapig stuff (#4229)

2023-05-15 15:53:39 +02:00

pipe_created

fix: FPs found in different environments

2023-04-20 09:48:47 +02:00

powershell

feat: new rules, updates and goofy guineapig stuff (#4229)

2023-05-15 15:53:39 +02:00

process_access

fix: apply suggestions from code review

2023-05-09 16:04:24 +02:00

process_creation

feat: add new rules related to cloudflared usage (#4243)

2023-05-17 17:21:23 +02:00

raw_access_thread

feat: new rules, updates and goofy guineapig stuff (#4229)

2023-05-15 15:53:39 +02:00

registry

feat: new rules, updates and goofy guineapig stuff (#4229)

2023-05-15 15:53:39 +02:00

sysmon

fix: typos in multiple rules (#4011)

2023-02-06 13:53:23 +01:00

wmi_event

chore: add nextron authors tag

2023-02-01 11:14:59 +01:00