blue-team-tools/rules/windows/powershell at af1cf4615f78ecbeffb87e08bf2f530fe017a56e - blue-team-tools - GreySec Git

security-tools/blue-team-tools

Files

T

History

Thomas Patzke 0592cbb67a Added UUIDs to rules

2019-11-12 23:12:27 +01:00

..

powershell_data_compressed.yml

Added UUIDs to rules

2019-11-12 23:12:27 +01:00

powershell_downgrade_attack.yml

Added UUIDs to rules

2019-11-12 23:12:27 +01:00

powershell_exe_calling_ps.yml

Added UUIDs to rules

2019-11-12 23:12:27 +01:00

powershell_malicious_commandlets.yml

Added UUIDs to rules

2019-11-12 23:12:27 +01:00

powershell_malicious_keywords.yml

Added UUIDs to rules

2019-11-12 23:12:27 +01:00

powershell_ntfs_ads_access.yml

Added UUIDs to rules

2019-11-12 23:12:27 +01:00

powershell_prompt_credentials.yml

Added UUIDs to rules

2019-11-12 23:12:27 +01:00

powershell_psattack.yml

Added UUIDs to rules

2019-11-12 23:12:27 +01:00

powershell_shellcode_b64.yml

Added UUIDs to rules

2019-11-12 23:12:27 +01:00

powershell_suspicious_download.yml

Added UUIDs to rules

2019-11-12 23:12:27 +01:00

powershell_suspicious_invocation_generic.yml

Added UUIDs to rules

2019-11-12 23:12:27 +01:00

powershell_suspicious_invocation_specific.yml

Added UUIDs to rules

2019-11-12 23:12:27 +01:00

powershell_suspicious_keywords.yml

Added UUIDs to rules

2019-11-12 23:12:27 +01:00

powershell_winlogon_helper_dll.yml

Added UUIDs to rules

2019-11-12 23:12:27 +01:00