blue-team-tools

Files

T

Kostas 07c285ca29 Merge PR #5265 form @tsale - Update Obfuscated PowerShell OneLiner Execution and author of multiple rules

update: Obfuscated PowerShell OneLiner Execution - Enhance logic to increase coverage.

---------

Co-authored-by: Nasreddine Bencherchali <nasreddineb@splunk.com>

2025-04-17 21:42:17 +02:00

application

Merge PR #5216 from @nasbench - Promote older rules status from experimental to test

2025-03-05 00:23:27 +01:00

category

Merge PR #5068 from @ruppde - Update rules in the Antivirus category with additional strings and signature names

2024-11-04 11:45:07 +01:00

cloud

Merge PR #5236 from @nickatrecon - Update AWS New Lambda Layer Attached

2025-04-07 11:07:50 +02:00

compliance

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

linux

Merge PR #5249 from @nasbench - Promote older rules status from experimental to test

2025-04-17 00:41:35 +02:00

macos

Merge PR #5249 from @nasbench - Promote older rules status from experimental to test

2025-04-17 00:41:35 +02:00

network

Merge PR #5214 from @signalblur - Add HTTP Request to Low Reputation TLD or Suspicious File Extension

2025-03-05 00:13:45 +01:00

web

Merge PR #5249 from @nasbench - Promote older rules status from experimental to test

2025-04-17 00:41:35 +02:00

windows

Merge PR #5265 form @tsale - Update Obfuscated PowerShell OneLiner Execution and author of multiple rules

2025-04-17 21:42:17 +02:00

README.md

chore: move more rules

2023-04-21 15:01:48 +02:00

README.md

TBD