Logo
Explore Help
Sign In
security-tools/blue-team-tools
1
0
Fork 0
You've already forked blue-team-tools
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
8973b573bde4d4086e96a165f554a0dcfbf72038
blue-team-tools/rules/windows
T
History
Florian Roth 8973b573bd Update and rename rules/windows/other/win_Outlook_C2_Macro_Creation.yml to rules/windows/file_event/win_outlook_c2_macro_creation.yml
2021-05-04 09:36:26 +02:00
..
builtin
false positive - added Azure AD Connect
2021-04-20 08:24:38 -04:00
deprecated
fix: buggy rule
2020-05-23 18:32:02 +02:00
driver_load
Fixes and improvements
2021-04-03 00:08:55 +02:00
file_event
Update and rename rules/windows/other/win_Outlook_C2_Macro_Creation.yml to rules/windows/file_event/win_outlook_c2_macro_creation.yml
2021-05-04 09:36:26 +02:00
image_load
Merge branch 'pr-1158'
2021-04-08 23:01:54 +02:00
malware
Merge branch 'oscd'
2021-04-06 00:05:35 +02:00
network_connection
Merge branch 'pr-1158'
2021-04-08 23:01:54 +02:00
other
Update and rename rules/windows/other/win_Outlook_C2_Macro_Creation.yml to rules/windows/file_event/win_outlook_c2_macro_creation.yml
2021-05-04 09:36:26 +02:00
powershell
Merge pull request #1418 from SigmaHQ/rule-devel
2021-04-09 17:26:02 +02:00
process_access
Merge branch 'pr-1158'
2021-04-08 23:01:54 +02:00
process_creation
Fix typo on CommandLine
2021-04-19 08:20:44 +02:00
registry_event
HybridConnectionMgr Service Activity
2021-04-12 16:26:15 -04:00
sysmon
HybridConnectionMgr Service Activity
2021-04-12 16:26:15 -04:00
Powered by Gitea Version: 1.26.1 Page: 248ms Template: 6ms
Auto
English
Bahasa Indonesia Deutsch English Español Français Gaeilge Italiano Latviešu Magyar nyelv Nederlands Polski Português de Portugal Português do Brasil Suomi Svenska Türkçe Čeština Ελληνικά Български Русский Українська فارسی മലയാളം 日本語 简体中文 繁體中文(台灣) 繁體中文(香港) 한국어
Licenses API