security-tools/blue-team-tools
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
b09efee0452e7be7773807d8761a83d7fc54e033
blue-team-tools/rules/windows
T
History
Florian Roth b09efee045 Merge pull request #1600 from SigmaHQ/rule-devel 
rule: suspicious printer driver - empty manufacturer
2021-07-01 16:46:09 +02:00
..
builtin
Merge pull request #1598 from SigmaHQ/rule-devel
2021-07-01 12:05:10 +02:00
create_remote_thread
Merging upstream updates
2021-07-01 12:18:30 +05:45
create_stream_hash
Merging upstream updates
2021-07-01 12:18:30 +05:45
deprecated
Merging upstream updates
2021-07-01 12:18:30 +05:45
dns_query
Merging upstream updates
2021-07-01 12:18:30 +05:45
driver_load
Merging upstream updates
2021-07-01 12:18:30 +05:45
file_delete
Merging upstream updates
2021-07-01 12:18:30 +05:45
file_event
Merging upstream updates
2021-07-01 12:18:30 +05:45
image_load
Fixed bug in path
2021-07-01 12:26:00 +05:45
malware
fix: missing indentation
2021-07-01 10:29:20 +02:00
network_connection
Merging upstream updates
2021-07-01 12:18:30 +05:45
other
Merging upstream updates
2021-07-01 12:18:30 +05:45
pipe_created
Merging upstream updates
2021-07-01 12:18:30 +05:45
powershell
Merging upstream updates
2021-07-01 12:18:30 +05:45
process_access
Merging upstream updates
2021-07-01 12:18:30 +05:45
process_creation
Merging upstream updates
2021-07-01 12:18:30 +05:45
raw_access_thread
Merging upstream updates
2021-07-01 12:18:30 +05:45
registry_event
Merge pull request #1600 from SigmaHQ/rule-devel
2021-07-01 16:46:09 +02:00
sysmon
Merging upstream updates
2021-07-01 12:18:30 +05:45
wmi_event
Merging upstream updates
2021-07-01 12:18:30 +05:45