security-tools/blue-team-tools
1
0
Fork 0
Code Issues Pull Requests Actions 45 Packages Projects Releases Wiki Activity
Files
ad80b4d75f603805d1d71b022f2bc9916fff4a8b
blue-team-tools/rules
T
History
Swachchhanda Shrawan Poudel 797bcaebfe Merge PR #5900 from @swachchhanda000 - Update Important scheduled task manipulation related rules 
update: Important Scheduled Task Deleted or Disabled - Add EventID 142.
update: Disable Important Scheduled Task - Add OFN and remove unecessary string binding for increased coverage.
update: Delete Important Scheduled Task - Add OFN and remove unecessary string binding for increased coverage.
new: System Restore Registry Modification via CommandLine
chore: add regression tests for Important scheduled task manipulation rules

---------

Co-authored-by: Nasreddine Bencherchali <monsteroffire2@gmail.com>
2026-04-28 04:00:16 +02:00
..
application
Merge PR #5893 from @st0pp3r - Update Github Delete Action Invoked
2026-04-28 00:54:21 +02:00
category
Merge PR #5477 from @phantinuss - chore: update MITRE tag t1219 to t1219.002
2025-06-13 10:00:52 +02:00
cloud
Merge PR #5409 from @Luke57 - Add New Google Workspace Related Rules
2026-04-28 02:48:14 +02:00
identity
Merge PR #5964 from @mostafa - Update Okta Rules to use CamelCase fields
2026-04-27 21:55:40 +02:00
linux
Merge PR #5908 from @swachchhanda000 - Fix fps and improve metadata of several Linux rules
2026-04-28 01:12:30 +02:00
macos
Merge PR #5791 from @Niicolaa - fix: add correct osascript path
2025-12-09 08:03:04 +05:45
network
Merge PR #5909 from @EzLucky - Add Cisco Dot1x Disabled
2026-04-28 01:16:37 +02:00
web
Merge PR #5769 from @nasbench - fix keywords rule and remove the fields field
2025-11-24 09:54:29 +01:00
windows
Merge PR #5900 from @swachchhanda000 - Update Important scheduled task manipulation related rules
2026-04-28 04:00:16 +02:00
README.md
chore: move more rules
2023-04-21 15:01:48 +02:00

README.md

TBD

Reference in New Issue View Git Blame Copy Permalink