Files
blue-team-tools/rules/windows/file/file_access
frack113 a1b75c6e14 Merge PR #4398 from @nasbench & @frack113 - Update File Access Rules
new: Access To .Reg/.Hive Files By Uncommon Application
update: Access To Browser Credential Files By Uncommon Application
update: Credential Manager Access By Uncommon Application
update: Access To Windows DPAPI Master Keys By Uncommon Application
update: Access To Windows Credential History File By Uncommon Application

---------

Signed-off-by: frack113 <62423083+frack113@users.noreply.github.com>
Co-authored-by: phantinuss <79651203+phantinuss@users.noreply.github.com>
Co-authored-by: Nasreddine Bencherchali <8741929+nasbench@users.noreply.github.com>
2023-09-15 18:22:02 +02:00
..