z00t 8e8b86aab9 Merge PR #5095 from @faisalusuf - Add new rules related to QuickAssist usage ...

new: QuickAssist Execution
new: DNS Query Request By QuickAssist.EXE
---------

Co-authored-by: Nasreddine Bencherchali <nasreddineb@splunk.com>

2024-12-19 18:07:19 +01:00

..

dns_query_win_anonymfiles_com.yml

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

dns_query_win_appinstaller.yml

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

dns_query_win_cloudflared_communication.yml

Merge PR #5065 from @nasbench - Promote older rules status from experimental to test

2024-11-01 10:21:04 +01:00

dns_query_win_devtunnels_communication.yml

Merge PR #5027 from @nasbench - Promote older rules status from experimental to test

2024-10-01 14:56:09 +02:00

dns_query_win_dns_server_discovery_via_ldap_query.yml

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

dns_query_win_domain_azurewebsites.yml

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

dns_query_win_hybridconnectionmgr_servicebus.yml

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

dns_query_win_mal_cobaltstrike.yml

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

dns_query_win_mega_nz.yml

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

dns_query_win_onelaunch_update_service.yml

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

dns_query_win_quickassist.yml

Merge PR #5095 from @faisalusuf - Add new rules related to QuickAssist usage

2024-12-19 18:07:19 +01:00

dns_query_win_regsvr32_dns_query.yml

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

dns_query_win_remote_access_software_domains_non_browsers.yml

Merge PR #4980 from @Mahir-Ali-khan - Update DNS Query To Remote Access Software Domain From Non-Browser App

2024-09-13 13:55:33 +02:00

dns_query_win_susp_external_ip_lookup.yml

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

dns_query_win_teamviewer_domain_query_by_uncommon_app.yml

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

dns_query_win_tor_onion_domain_query.yml

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

dns_query_win_ufile_io_query.yml

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

dns_query_win_vscode_tunnel_communication.yml

Merge PR #5027 from @nasbench - Promote older rules status from experimental to test

2024-10-01 14:56:09 +02:00