Logo
Explore Help
Sign In
security-tools/blue-team-tools
1
0
Fork 0
You've already forked blue-team-tools
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity
Files
7dc0facf0579d243d23266fe512e7ace3e5035ea
blue-team-tools/rules/windows/powershell/powershell_classic
T
History
Florian Roth 921d46ca79 fix: FPs noticed with Aurora
2022-02-21 18:43:18 +01:00
..
posh_pc_alternate_powershell_hosts.yml
fix: FPs noticed with Aurora
2022-02-21 18:43:18 +01:00
posh_pc_delete_volume_shadow_copies.yml
Rename powershell_classic
2022-01-15 10:30:03 +01:00
posh_pc_downgrade_attack.yml
remove invalid tag
2022-01-19 18:23:30 +01:00
posh_pc_exe_calling_ps.yml
remove invalid tag
2022-01-19 18:23:30 +01:00
posh_pc_powercat.yml
Rename powershell_classic
2022-01-15 10:30:03 +01:00
posh_pc_remote_powershell_session.yml
remove invalid tag
2022-01-19 18:23:30 +01:00
posh_pc_renamed_powershell.yml
remove invalid tag
2022-01-19 18:23:30 +01:00
posh_pc_susp_athremotefxvgpudisablementcommand.yml
Rename powershell_classic
2022-01-15 10:30:03 +01:00
posh_pc_susp_get_nettcpconnection.yml
Rename powershell_classic
2022-01-15 10:30:03 +01:00
posh_pc_susp_zip_compress.yml
Rename powershell_classic
2022-01-15 10:30:03 +01:00
posh_pc_suspicious_download.yml
remove invalid tag
2022-01-19 18:23:30 +01:00
posh_pc_tamper_with_windows_defender.yml
Rename powershell_classic
2022-01-15 10:30:03 +01:00
posh_pc_wsman_com_provider_no_powershell.yml
Rename powershell_classic
2022-01-15 10:30:03 +01:00
posh_pc_xor_commandline.yml
remove invalid tag
2022-01-19 18:23:30 +01:00
Powered by Gitea Version: 1.26.1 Page: 140ms Template: 16ms
Auto
English
Bahasa Indonesia Deutsch English Español Français Gaeilge Italiano Latviešu Magyar nyelv Nederlands Polski Português de Portugal Português do Brasil Suomi Svenska Türkçe Čeština Ελληνικά Български Русский Українська فارسی മലയാളം 日本語 简体中文 繁體中文(台灣) 繁體中文(香港) 한국어
Licenses API