security-tools/blue-team-tools
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity
Files
a13a5efd478316cfb09689a48aae385fee53d8da
blue-team-tools/rules/windows
T
History
Nasreddine Bencherchali a13a5efd47 More FP tuning
2022-10-20 11:51:06 +02:00
..
builtin
Merge pull request #3602 from nasbench/nasbench-rule-devel
2022-10-20 10:28:56 +02:00
create_remote_thread
fix: filter definition
2022-09-29 14:07:38 +02:00
create_stream_hash
refactor: JuicyPotatoNG imphashes
2022-10-06 08:30:48 +02:00
dns_query
Fix related
2022-10-09 17:28:05 +02:00
driver_load
Update driver_load_vuln_drivers_names.yml
2022-10-17 15:23:14 +02:00
file
New File Access Rules
2022-10-18 11:51:24 +02:00
image_load
fix: FPs on test machine
2022-10-18 16:39:04 +02:00
network_connection
old experimental rule promotion
2022-10-09 16:54:04 +02:00
pipe_created
Fix FP Found In Testing
2022-10-10 17:33:14 +02:00
powershell
Merge pull request #3602 from nasbench/nasbench-rule-devel
2022-10-20 10:28:56 +02:00
process_access
More FP tuning
2022-10-20 11:51:06 +02:00
process_creation
Update proc_creation_win_lolbin_susp_wsl.yml
2022-10-20 11:19:54 +02:00
raw_access_thread
fix: FPs with THOR
2022-03-15 18:05:42 +01:00
registry
More FP tuning
2022-10-20 11:51:06 +02:00
sysmon
old experimental rule promotion
2022-10-09 16:54:04 +02:00
wmi_event
old experimental rule promotion
2022-10-09 16:54:04 +02:00