Florian Roth 0cbb6f82ad CobaltStrike NamedPipe Patterns ...

https://svch0st.medium.com/guide-to-named-pipes-and-hunting-for-cobalt-strike-pipes-dc46b2c5f575

2021-07-30 07:11:11 +02:00

..

sysmon_alternate_powershell_hosts_pipe.yml

Update Threat Hunter Playbook Reference

2021-05-22 01:02:43 -03:00

sysmon_apt_turla_namedpipes.yml

Merge branch 'master' of https://github.com/SigmaHQ/sigma

2021-04-15 01:25:48 +02:00

sysmon_cred_dump_tools_named_pipes.yml

- Remove 'service: sysmon' since defining the categories made the rules generic

2020-10-02 09:37:52 +02:00

sysmon_mal_cobaltstrike_re.yml

CobaltStrike NamedPipe Patterns

2021-07-30 07:11:11 +02:00

sysmon_mal_cobaltstrike.yml

refactor: reworked CS pipe rule

2021-05-26 17:22:34 +02:00

sysmon_mal_namedpipes.yml

docs: extended authors of malicious pipe rule

2021-05-04 09:28:17 +02:00

sysmon_powershell_execution_pipe.yml

Clean-up service: sysmon as it will be replaced by filling the category

2021-04-15 02:02:25 +02:00

sysmon_psexec_pipes_artifacts.yml

Clean-up service: sysmon as it will be replaced by filling the category

2021-04-15 02:02:25 +02:00

sysmon_susp_cobaltstrike_pipe_patterns.yml

CobaltStrike NamedPipe Patterns

2021-07-30 07:11:11 +02:00