security-tools/blue-team-tools
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
889efd1663f0781e110f32e8e81e88a311e6c500
blue-team-tools/rules/windows/dns_query
T
History
Sajid Nawaz Khan d88e556516 Merge PR #4628 from @ssnkhan - New: Detect Creation of Cloudflared Quick Tunnels 
new: Cloudflared Tunnels Related DNS Requests
new: Cloudflared Portable Execution
new: Cloudflared Quick Tunnel Execution
new: Renamed Cloudflared.EXE Execution
update: Cloudflared Tunnel Connections Cleanup - Enhanced CLI flag selection to remove the unnecessary double dash
update: Cloudflared Tunnel Execution - Enhanced CLI flag selection to remove the unnecessary double dash

---------

Co-authored-by: Sajid Nawaz Khan <snkhan@Sajids-MacBook-Pro.local>
Co-authored-by: nasbench <8741929+nasbench@users.noreply.github.com>
2023-12-21 12:32:08 +01:00
..
dns_query_win_anonymfiles_com.yml
Merge PR #4611 from @nasbench - Promote Older Rules Status From experimental To test
2023-12-01 12:50:36 +01:00
dns_query_win_appinstaller.yml
Merge PR #4557 from @swachchhanda000 - Multiple Rule Updates & New Rules
2023-11-14 09:46:39 +01:00
dns_query_win_cloudflared_communication.yml
Merge PR #4628 from @ssnkhan - New: Detect Creation of Cloudflared Quick Tunnels
2023-12-21 12:32:08 +01:00
dns_query_win_devtunnels_communication.yml
Merge PR #4580 from @deFr0ggy - Update VsCode/DevTunnels Communication Related Rules
2023-11-20 13:22:15 +01:00
dns_query_win_dns_server_discovery_via_ldap_query.yml
Merge PR #4427 from @nasbench - Multiple Fixes & Enhancements
2023-10-04 19:06:57 +02:00
dns_query_win_hybridconnectionmgr_servicebus.yml
feat: new rules and updates
2023-01-17 01:00:44 +01:00
dns_query_win_mal_cobaltstrike.yml
chore: add nextron authors tag
2023-02-01 11:14:59 +01:00
dns_query_win_mega_nz.yml
Merge PR #4427 from @nasbench - Multiple Fixes & Enhancements
2023-10-04 19:06:57 +02:00
dns_query_win_regsvr32_dns_query.yml
Merge PR #4427 from @nasbench - Multiple Fixes & Enhancements
2023-10-04 19:06:57 +02:00
dns_query_win_remote_access_software_domains_non_browsers.yml
Merge PR #4482 From @nasbench - Add New Automation Workflows
2023-10-18 11:53:44 +02:00
dns_query_win_susp_external_ip_lookup.yml
Merge PR #4604 from @AaronHoffmannRL - Add external IP lookup API hostnames
2023-12-01 15:08:53 +01:00
dns_query_win_teamviewer_domain_query_by_uncommon_app.yml
Merge PR #4427 from @nasbench - Multiple Fixes & Enhancements
2023-10-04 19:06:57 +02:00
dns_query_win_tor_onion_domain_query.yml
Merge PR #4427 from @nasbench - Multiple Fixes & Enhancements
2023-10-04 19:06:57 +02:00
dns_query_win_ufile_io_query.yml
Merge PR #4427 from @nasbench - Multiple Fixes & Enhancements
2023-10-04 19:06:57 +02:00
dns_query_win_vscode_tunnel_communication.yml
Merge PR #4580 from @deFr0ggy - Update VsCode/DevTunnels Communication Related Rules
2023-11-20 13:22:15 +01:00