tr0mb1r 5b3ae271a1 Merge PR #4690 from @tr0mb1r - filter Websense named pipe ...

fix: CobaltStrike Named Pipe Patterns - Add Websense named pipe filter

---------

Co-authored-by: nasbench <8741929+nasbench@users.noreply.github.com>

2024-01-29 11:50:59 +01:00

..

pipe_created_adfs_namedpipe_connection_uncommon_tool.yml

Merge PR #4577 from @nasbench - Multiple Fixes & Updates

2023-12-21 21:04:18 +01:00

pipe_created_hktl_cobaltstrike_re.yml

feat: rules update

2023-08-07 16:09:21 +02:00

pipe_created_hktl_cobaltstrike_susp_pipe_patterns.yml

Merge PR #4690 from @tr0mb1r - filter Websense named pipe

2024-01-29 11:50:59 +01:00

pipe_created_hktl_cobaltstrike.yml

feat: rules update

2023-08-07 16:09:21 +02:00

pipe_created_hktl_coercedpotato.yml

Merge PR #4477 from @Neo23x0 - CoercedPotato activity

2023-10-12 12:52:45 +02:00

pipe_created_hktl_diagtrack_eop.yml

feat: rules update

2023-08-07 16:09:21 +02:00

pipe_created_hktl_efspotato.yml

Merge PR #4632 from @tr0mb1r - Add exclusion for pipe names starting with \pipe\

2023-12-21 10:11:49 +01:00

pipe_created_hktl_generic_cred_dump_tools_pipes.yml

feat: rules update

2023-08-07 16:09:21 +02:00

pipe_created_hktl_koh_default_pipe.yml

feat: rules update

2023-08-07 16:09:21 +02:00

pipe_created_powershell_alternate_host_pipe.yml

Merge PR #4577 from @nasbench - Multiple Fixes & Updates

2023-12-21 21:04:18 +01:00

pipe_created_powershell_execution_pipe.yml

Merge PR #4577 from @nasbench - Multiple Fixes & Updates

2023-12-21 21:04:18 +01:00

pipe_created_pua_csexec_default_pipe.yml

Merge PR #4577 from @nasbench - Multiple Fixes & Updates

2023-12-21 21:04:18 +01:00

pipe_created_pua_paexec_default_pipe.yml

Merge PR #4577 from @nasbench - Multiple Fixes & Updates

2023-12-21 21:04:18 +01:00

pipe_created_pua_remcom_default_pipe.yml

Merge PR #4577 from @nasbench - Multiple Fixes & Updates

2023-12-21 21:04:18 +01:00

pipe_created_scrcons_wmi_consumer_namedpipe.yml

Merge PR #4577 from @nasbench - Multiple Fixes & Updates

2023-12-21 21:04:18 +01:00

pipe_created_susp_malicious_namedpipes.yml

Merge PR #4577 from @nasbench - Multiple Fixes & Updates

2023-12-21 21:04:18 +01:00

pipe_created_sysinternals_psexec_default_pipe_susp_location.yml

Merge PR #4427 from @nasbench - Multiple Fixes & Enhancements

2023-10-04 19:06:57 +02:00