security-tools/blue-team-tools
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
b478f24985e9aa77340775a67dccbf5a767287ee
blue-team-tools/rules
T
History
Kevin Branch b478f24985 Update proc_creation_win_persistence_userinitmprlogonscript.yml 
When logging into Windows Core, userinit.exe normalls calls PowerShell.exe without parameters to bring up a PowerShell window.
2023-06-05 12:57:52 -04:00
..
application
remove duplicate reference urls
2023-04-18 11:03:07 -04:00
category
feat: map antivirus categoriy to Windows Defender logs
2023-05-19 14:27:56 +02:00
cloud
Update rules/cloud/okta/okta_fastpass_phishing_detection.yml
2023-05-10 01:18:00 -05:00
compliance
feat: filename test enhancements (#3812)
2022-12-23 09:25:16 +01:00
linux
feat: new linux rules related to GobRAT malware (#4272)
2023-06-02 15:49:43 +02:00
macos
feat: new macos rule Suspicious Browser Child Process (#4053)
2023-04-05 14:58:09 +02:00
network
Fix logsource
2023-05-26 13:51:07 +02:00
web
chore: update rules from r-dns to cs-host
2023-05-18 23:03:23 +02:00
windows
Update proc_creation_win_persistence_userinitmprlogonscript.yml
2023-06-05 12:57:52 -04:00
README.md
chore: move more rules
2023-04-21 15:01:48 +02:00

README.md

TBD

Reference in New Issue View Git Blame Copy Permalink