security-tools/blue-team-tools
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
87879f69cfdfa1e759c69cda797c8dfd4c8bb2dd
blue-team-tools/rules/windows/builtin
T
History
frack113 18e9704e2c Merge pull request #3964 from YamatoSecurity/master 
update pw spraying via explicit creds rules
2023-01-28 07:59:00 +01:00
..
application
fix: add new ref
2023-01-12 18:37:35 +01:00
applocker
Order yaml field
2022-10-25 11:08:51 +02:00
appmodel_runtime
feat: new rules and updates
2023-01-17 01:00:44 +01:00
appxdeployment_server
feat: update sharing websites
2023-01-19 22:07:31 +01:00
appxpackaging_om
feat: new rules and updates
2023-01-17 01:00:44 +01:00
bits_client
change status to test
2023-01-27 06:48:34 +01:00
code_integrity
fix: FPs in testing environment
2023-01-25 16:23:10 +01:00
diagnosis/scripted
Order yaml field
2022-10-25 11:08:51 +02:00
dns_client
change status to test
2023-01-27 06:48:34 +01:00
dns_server
Filename normalisation
2023-01-07 08:52:11 +01:00
dns_server_analytic
Update from review
2023-01-02 12:05:54 +01:00
driverframeworks
feat: proxynotshell owa variant rules
2022-12-22 12:10:29 +01:00
firewall_as
fix: broken title
2023-01-17 19:14:32 +01:00
ldap
feat: add new reference
2022-12-28 16:17:46 +01:00
lsa_server
fix: apply suggestions from code review
2023-01-13 18:19:32 +01:00
msexchange
feat: more updates, renames and fixes
2023-01-27 00:30:16 +01:00
ntlm
change status to test
2023-01-27 06:48:34 +01:00
openssh
Change rule service
2022-10-25 20:03:11 +02:00
printservice
fix: remove non existent eid and fix #2744
2022-11-15 22:58:19 +01:00
security
Merge pull request #3964 from YamatoSecurity/master
2023-01-28 07:59:00 +01:00
security_mitigations
update modified tag
2022-09-28 06:32:34 +09:00
servicebus
old experimental rule promotion
2022-10-09 16:54:04 +02:00
shell_core
Order yaml field
2022-10-25 11:08:51 +02:00
smbclient
Update field name
2023-01-02 15:49:45 +01:00
system
change status to test
2023-01-27 06:48:34 +01:00
taskscheduler
fix: description
2023-01-13 18:01:10 +01:00
terminalservices
Order yaml field
2022-10-25 11:08:51 +02:00
windefend
Promotion rules (#3821)
2022-12-27 12:29:10 +01:00
wmi
change status to test
2023-01-27 06:48:34 +01:00
win_alert_mimikatz_keywords.yml
change status to test
2023-01-27 06:48:34 +01:00