Logo
Explore Help
Sign In
security-tools/blue-team-tools
1
0
Fork 0
You've already forked blue-team-tools
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
b02a2ff2dc7aeba219301a19e4e8b64a54f71694
blue-team-tools/rules/windows
T
History
Nasreddine Bencherchali b02a2ff2dc Update proc_creation_win_net_default_accounts_manipulation.yml
2022-09-02 09:49:14 +02:00
..
builtin
Update win_msi_install_from_susp_locations.yml
2022-08-31 13:55:30 +02:00
create_remote_thread
fix: FP found in testing environment
2022-08-29 16:58:12 +02:00
create_stream_hash
fix: duplicate UUIDs
2022-08-25 08:23:48 +02:00
dns_query
Update dns_query_win_susp_ldap.yml
2022-08-21 07:37:56 +02:00
driver_load
New+Update
2022-09-02 09:15:21 +02:00
file_access
System FP
2022-07-27 10:52:08 +02:00
file_change
Added modified date
2022-09-01 15:27:20 +02:00
file_delete
…
file_event
Update file_event_win_susp_winword_startup.yml
2022-08-29 20:16:41 +02:00
file_rename
Add Ref
2022-08-12 17:25:49 +02:00
image_load
Update image_load_susp_cmstp.yml
2022-08-31 09:53:07 +02:00
network_connection
Update net_connection_win_susp_cmstp.yml
2022-08-31 09:46:18 +02:00
pipe_created
rule: CsExec
2022-08-22 17:43:49 +02:00
powershell
Update posh_ps_nishang_malicious_commandlets.yml
2022-08-29 18:53:22 +02:00
process_access
Adding Google Chrome FP
2022-08-31 11:35:12 +04:30
process_creation
Update proc_creation_win_net_default_accounts_manipulation.yml
2022-09-02 09:49:14 +02:00
raw_access_thread
…
registry
Update registry_set_disable_uac_registry.yml
2022-08-29 20:12:10 +02:00
sysmon
Update Sysmon
2022-08-16 19:47:44 +01:00
wmi_event
…
Powered by Gitea Version: 1.26.1 Page: 1107ms Template: 36ms
Auto
English
Bahasa Indonesia Deutsch English Español Français Gaeilge Italiano Latviešu Magyar nyelv Nederlands Polski Português de Portugal Português do Brasil Suomi Svenska Türkçe Čeština Ελληνικά Български Русский Українська فارسی മലയാളം 日本語 简体中文 繁體中文(台灣) 繁體中文(香港) 한국어
Licenses API