Logo
Explore Help
Sign In
security-tools/blue-team-tools
1
0
Fork 0
You've already forked blue-team-tools
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
7baf0144216fda349deacddf0b68199b80f6aab5
blue-team-tools/rules/windows/powershell/powershell_classic
T
History
Florian Roth 921d46ca79 fix: FPs noticed with Aurora
2022-02-21 18:43:18 +01:00
..
posh_pc_alternate_powershell_hosts.yml
fix: FPs noticed with Aurora
2022-02-21 18:43:18 +01:00
posh_pc_delete_volume_shadow_copies.yml
Rename powershell_classic
2022-01-15 10:30:03 +01:00
posh_pc_downgrade_attack.yml
remove invalid tag
2022-01-19 18:23:30 +01:00
posh_pc_exe_calling_ps.yml
remove invalid tag
2022-01-19 18:23:30 +01:00
posh_pc_powercat.yml
Rename powershell_classic
2022-01-15 10:30:03 +01:00
posh_pc_remote_powershell_session.yml
remove invalid tag
2022-01-19 18:23:30 +01:00
posh_pc_renamed_powershell.yml
remove invalid tag
2022-01-19 18:23:30 +01:00
posh_pc_susp_athremotefxvgpudisablementcommand.yml
Rename powershell_classic
2022-01-15 10:30:03 +01:00
posh_pc_susp_get_nettcpconnection.yml
Rename powershell_classic
2022-01-15 10:30:03 +01:00
posh_pc_susp_zip_compress.yml
Rename powershell_classic
2022-01-15 10:30:03 +01:00
posh_pc_suspicious_download.yml
remove invalid tag
2022-01-19 18:23:30 +01:00
posh_pc_tamper_with_windows_defender.yml
Rename powershell_classic
2022-01-15 10:30:03 +01:00
posh_pc_wsman_com_provider_no_powershell.yml
Rename powershell_classic
2022-01-15 10:30:03 +01:00
posh_pc_xor_commandline.yml
remove invalid tag
2022-01-19 18:23:30 +01:00
Powered by Gitea Version: 1.26.1 Page: 25ms Template: 3ms
Auto
English
Bahasa Indonesia Deutsch English Español Français Gaeilge Italiano Latviešu Magyar nyelv Nederlands Polski Português de Portugal Português do Brasil Suomi Svenska Türkçe Čeština Ελληνικά Български Русский Українська فارسی മലയാളം 日本語 简体中文 繁體中文(台灣) 繁體中文(香港) 한국어
Licenses API