Logo
Explore Help
Sign In
security-tools/blue-team-tools
1
0
Fork 0
You've already forked blue-team-tools
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
7f2ad6df8938d2bbb70c52f19bb94d5d2b0abfe6
blue-team-tools/rules/windows
T
History
Bhabesh d7d9a19cd4 Added rule for shellcode injection by Metasploit and Empire
2022-03-11 20:05:22 +05:45
..
builtin
Fix contains
2022-03-06 20:50:19 +01:00
create_remote_thread
…
create_stream_hash
…
deprecated
fix: FPs noticed in THOR testing
2022-02-21 10:15:27 +01:00
dns_query
Name Normalization
2022-02-27 07:39:46 +01:00
driver_load
…
etw/file_rename
fix: FPs noticed with VSCode
2022-03-07 15:41:00 +01:00
file_delete
Name Normalization
2022-02-27 07:39:46 +01:00
file_event
fix: FPs with webex and temp assembly
2022-03-02 14:48:37 +01:00
image_load
Name Normalization
2022-02-27 10:58:14 +01:00
network_connection
Merge branch 'master' into aurora-false-positive-fixing
2022-03-07 15:40:42 +01:00
pipe_created
Name Normalization
2022-02-27 10:58:14 +01:00
powershell
fix: values missed escaping
2022-03-05 10:39:15 +01:00
process_access
Added rule for shellcode injection by Metasploit and Empire
2022-03-11 20:05:22 +05:45
process_creation
Merge branch 'master' into pr/2785
2022-03-08 08:43:59 +01:00
raw_access_thread
fix: FPs noticed with Aurora
2022-02-21 18:43:18 +01:00
registry_event
fix: issue with contains
2022-03-07 16:43:06 +01:00
sysmon
…
wmi_event
…
Powered by Gitea Version: 1.26.1 Page: 1158ms Template: 66ms
Auto
English
Bahasa Indonesia Deutsch English Español Français Gaeilge Italiano Latviešu Magyar nyelv Nederlands Polski Português de Portugal Português do Brasil Suomi Svenska Türkçe Čeština Ελληνικά Български Русский Українська فارسی മലയാളം 日本語 简体中文 繁體中文(台灣) 繁體中文(香港) 한국어
Licenses API