blue-team-tools

Files

T

Josh 8254c4f36d Merge PR #4955 from @joshnck - Fix agentexecutor.exe related rules

fix: AgentExecutor PowerShell Execution - Exclude `Microsoft.Management.Services.IntuneWindowsAgent.exe`
fix: Suspicious AgentExecutor PowerShell Execution - Exclude `Microsoft.Management.Services.IntuneWindowsAgent.exe` 

---------

Co-authored-by: nasbench <8741929+nasbench@users.noreply.github.com>

2024-08-07 16:01:47 +02:00

application

Merge PR #4899 from @kelnage - Add Kubernetes rules in audit log format

2024-07-11 16:09:01 +02:00

category

Merge PR #4917 from @Neo23x0 - Update antivirus related rules

2024-07-17 16:35:51 +02:00

cloud

Merge PR #4942 from @nasbench - promote older rules status from experimental to test

2024-08-01 10:26:14 +02:00

compliance

Merge PR #4681 from @nasbench - Add Missing Ref & Tags