Thomas Patzke 8e010ec60c Added rule ...

From https://www.binarydefense.com/analysis-of-hancitor-when-boring-begets-beacon
which weren't already covered by other rules and can be expressed
in Sigma.

2021-07-08 07:59:40 +02:00

..

cisco/aaa

Second round

2020-09-15 07:02:30 -06:00

zeek

Merge pull request #1573 from d4rk-d4nph3/master

2021-06-25 12:16:31 +02:00

net_apt_equationgroup_c2.yml

Second round

2020-09-15 07:02:30 -06:00

net_dns_c2_detection.yml

Second round

2020-09-15 07:02:30 -06:00

net_high_dns_bytes_out.yml

Second round

2020-09-15 07:02:30 -06:00

net_high_dns_requests_rate.yml

Second round

2020-09-15 07:02:30 -06:00

net_high_null_records_requests_rate.yml

Second round

2020-09-15 07:02:30 -06:00

net_high_txt_records_requests_rate.yml

Second round

2020-09-15 07:02:30 -06:00

net_mal_dns_cobaltstrike.yml

refactor: change level

2021-03-24 12:38:00 +01:00

net_susp_dns_b64_queries.yml

Update net_susp_dns_b64_queries.yml

2020-10-15 23:10:57 -03:00

net_susp_dns_txt_exec_strings.yml

Update net_susp_dns_txt_exec_strings.yml

2020-10-15 23:11:16 -03:00

net_susp_ipify.yml

Added rule

2021-07-08 07:59:40 +02:00

net_susp_network_scan.yml

Second round

2020-09-15 07:02:30 -06:00

net_susp_telegram_api.yml

Second round

2020-09-15 07:02:30 -06:00

net_wannacry_killswitch_domain.yml

fix: duplicate ID

2020-12-13 18:59:04 +01:00