security-tools/blue-team-tools
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
95fa99b4a35896274f888dcfdceec241bc875987
blue-team-tools/rules/windows
T
History
Florian Roth 64f5af4c45 Merge pull request #1432 from SigmaHQ/rule-devel 
fix: splunk windows config, additional rule
2021-04-23 10:30:44 +02:00
..
builtin
false positive - added Azure AD Connect
2021-04-20 08:24:38 -04:00
deprecated
fix: buggy rule
2020-05-23 18:32:02 +02:00
driver_load
Fixes and improvements
2021-04-03 00:08:55 +02:00
file_event
Merge branch 'pr-1158'
2021-04-08 23:01:54 +02:00
image_load
Merge branch 'pr-1158'
2021-04-08 23:01:54 +02:00
malware
Merge branch 'oscd'
2021-04-06 00:05:35 +02:00
network_connection
Merge branch 'pr-1158'
2021-04-08 23:01:54 +02:00
other
Merge branch 'oscd'
2021-03-02 22:58:41 +03:00
powershell
Merge pull request #1432 from SigmaHQ/rule-devel
2021-04-23 10:30:44 +02:00
process_access
Merge branch 'pr-1158'
2021-04-08 23:01:54 +02:00
process_creation
Fix typo on CommandLine
2021-04-19 08:20:44 +02:00
registry_event
HybridConnectionMgr Service Activity
2021-04-12 16:26:15 -04:00
sysmon
HybridConnectionMgr Service Activity
2021-04-12 16:26:15 -04:00