Logo
Explore Help
Sign In
security-tools/blue-team-tools
1
0
Fork 0
You've already forked blue-team-tools
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity
Files
97dacc4ffc3fd96341c9e65a8fa238bc313bc2f7
blue-team-tools/rules/windows
T
History
Florian Roth 97dacc4ffc refactor: increased level to medium
2022-02-06 14:17:38 +01:00
..
builtin
Merge pull request #2631 from JSHOX1/patch-1
2022-02-04 00:49:27 +01:00
create_remote_thread
remove invalid tag
2022-01-19 18:23:30 +01:00
create_stream_hash
remove invalid tag
2022-01-19 18:23:30 +01:00
deprecated
fix: FPs in deprecated rule
2022-01-28 23:43:11 +01:00
dns_query
refactor: added another TV domain
2022-01-30 22:26:01 +01:00
driver_load
remove invalid tag
2022-01-19 18:23:30 +01:00
file_delete
Merge pull request #2569 from frack113/red_20220116
2022-01-17 06:36:41 +01:00
file_event
Merge pull request #2624 from SigmaHQ/rule-devel
2022-01-31 16:38:58 +01:00
image_load
fix: far too many FPs with new Advapi31.dll rule
2022-02-04 14:03:14 +01:00
network_connection
fix: condition in malware back connect rule
2022-02-02 13:48:56 +01:00
pipe_created
Merge branch 'master' into pr/2573
2022-01-19 19:42:49 +01:00
powershell
refactor: increased level to medium
2022-02-06 14:17:38 +01:00
process_access
fix: remove new line
2022-02-03 21:54:16 +01:00
process_creation
Merge pull request #2643 from elhoim/patch-1
2022-02-05 12:03:46 +01:00
raw_access_thread
fix: FPs noticed with Aurora
2022-02-04 09:53:33 +01:00
registry_event
Update win_re_set_servicedll.yml
2022-02-04 23:19:36 +01:00
sysmon
Update filter
2022-02-02 06:34:32 +01:00
wmi_event
remove invalid tag
2022-01-19 18:23:30 +01:00
Powered by Gitea Version: 1.26.1 Page: 294ms Template: 23ms
Auto
English
Bahasa Indonesia Deutsch English Español Français Gaeilge Italiano Latviešu Magyar nyelv Nederlands Polski Português de Portugal Português do Brasil Suomi Svenska Türkçe Čeština Ελληνικά Български Русский Українська فارسی മലയാളം 日本語 简体中文 繁體中文(台灣) 繁體中文(香港) 한국어
Licenses API