Logo
Explore Help
Sign In
security-tools/blue-team-tools
1
0
Fork 0
You've already forked blue-team-tools
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
92510e2507bbfcefbc3d91c92a19fcd789ec6043
blue-team-tools/rules/windows
T
History
Florian Roth 92510e2507 extended Exchange post-exploitation rule
2021-03-17 18:01:45 +01:00
..
builtin
fix: condition contains - values without 0x
2021-03-10 18:56:05 +01:00
deprecated
fix: buggy rule
2020-05-23 18:32:02 +02:00
driver_load
att&ck tags review: windows/builtin, windows/driver_load, windows/file_event, windows/image_load, windows/other
2020-08-25 01:09:17 +02:00
file_event
Merge pull request #1360 from d4rk-d4nph3/master
2021-03-03 09:32:05 +01:00
image_load
fixed various spelling errors all over rules and source code
2021-02-24 14:43:13 +00:00
malware
Fixed CobaltStrike typo
2021-02-25 07:25:20 +02:00
network_connection
rework: impossible rule with Sysmon
2021-01-19 14:12:40 +01:00
other
fix service from system to security for rule win_pcap_drivers.yml
2021-01-22 09:10:02 +01:00
powershell
fix: search for keywords within message
2021-02-26 09:42:12 +01:00
process_access
Split up cmstp rule into 3 separate rules and remove duplicates
2020-12-23 12:17:39 -05:00
process_creation
extended Exchange post-exploitation rule
2021-03-17 18:01:45 +01:00
registry_event
Merge pull request #1376 from SigmaHQ/rule-devel
2021-03-05 18:17:20 +01:00
sysmon
fixed various spelling errors all over rules and source code
2021-02-24 14:43:13 +00:00
Powered by Gitea Version: 1.26.1 Page: 339ms Template: 8ms
Auto
English
Bahasa Indonesia Deutsch English Español Français Gaeilge Italiano Latviešu Magyar nyelv Nederlands Polski Português de Portugal Português do Brasil Suomi Svenska Türkçe Čeština Ελληνικά Български Русский Українська فارسی മലയാളം 日本語 简体中文 繁體中文(台灣) 繁體中文(香港) 한국어
Licenses API