security-tools/blue-team-tools
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
a67ab607a18787f94a3de0f8e3379745fa0c1928
blue-team-tools/rules/windows/builtin
T
History
Florian Roth 187cb6b47e Merge pull request #3694 from SigmaHQ/aurora-false-positive-fixing 
Aurora false positive fixing
2022-11-15 09:35:45 +01:00
..
application
Order yaml field
2022-10-25 11:08:51 +02:00
applocker
Order yaml field
2022-10-25 11:08:51 +02:00
bits_client
Order yaml field
2022-10-25 11:08:51 +02:00
code_integrity
fix: apply suggestions from code review
2022-11-11 10:03:24 +01:00
diagnosis/scripted
Order yaml field
2022-10-25 11:08:51 +02:00
dns_server
Order yaml field
2022-10-25 11:08:51 +02:00
driverframeworks
Order yaml field
2022-10-25 11:08:51 +02:00
firewall_as
fix: new FPs found in testing environment
2022-11-01 16:19:14 +01:00
ldap
old experimental rule promotion
2022-10-09 16:54:04 +02:00
msexchange
Add/Update Exchange/Mailbox Rules
2022-10-26 23:17:54 +02:00
ntlm
Order yaml field
2022-10-25 11:08:51 +02:00
openssh
Change rule service
2022-10-25 20:03:11 +02:00
printservice
Order yaml field
2022-10-25 11:08:51 +02:00
security
fix: FPs noticed with Aurora
2022-11-13 20:26:03 +01:00
security_mitigations
update modified tag
2022-09-28 06:32:34 +09:00
servicebus
old experimental rule promotion
2022-10-09 16:54:04 +02:00
shell_core
Order yaml field
2022-10-25 11:08:51 +02:00
smbclient
Order yaml field
2022-10-25 11:08:51 +02:00
system
fix: FPs in testing environment
2022-11-14 08:54:47 +01:00
taskscheduler
Order yaml field
2022-10-25 11:08:51 +02:00
terminalservices
Order yaml field
2022-10-25 11:08:51 +02:00
windefend
Order yaml field
2022-10-25 11:08:51 +02:00
wmi
Order yaml field
2022-10-25 11:08:51 +02:00
win_alert_mimikatz_keywords.yml
Order yaml field
2022-10-25 11:08:51 +02:00