frack113 be43ecd70d Remove empty element in list ...

Otherwise get a `null` when convert to some backend (es-rule,...)

2021-08-24 07:57:16 +02:00

..

zeek_dce_rpc_mitre_bzar_execution.yml

docs: MITRE ATT&CK(R) trademark references removed or adjusted

2020-09-30 08:53:52 +02:00

zeek_dce_rpc_mitre_bzar_persistence.yml

docs: MITRE ATT&CK(R) trademark references removed or adjusted

2020-09-30 08:53:52 +02:00

zeek_dce_rpc_potential_petit_potam_efs_rpc_call.yml

condition fix and add fields

2021-08-23 14:59:06 -04:00

zeek_dce_rpc_printnightmare_print_driver_install.yml

Remove empty element in list

2021-08-24 07:57:16 +02:00

zeek_dce_rpc_smb_spoolss_named_pipe.yml

13 Rules from THP - Backlog Rules (old)

2020-10-13 03:33:55 -04:00

zeek_default_cobalt_strike_certificate.yml

Spelling Errors on Rules

2021-08-18 18:58:20 +00:00

zeek_dns_mining_pools.yml

Replace old mitre techniques by new one

2021-08-22 13:57:56 +02:00

zeek_dns_suspicious_zbit_flag.yml

Replace old mitre techniques by new one

2021-08-22 13:57:56 +02:00

zeek_dns_torproxy.yml

update fix

2021-08-19 17:55:41 +02:00

zeek_http_executable_download_from_webdav.yml

Update zeek_http_executable_download_from_webdav.yml

2020-10-15 23:13:20 -03:00

zeek_http_exfiltration_compressed_files.yml

Fixes&improvements

2021-04-08 01:06:40 +02:00

zeek_http_webdav_put_request.yml

Fixes&improvements

2021-04-08 01:06:40 +02:00

zeek_rdp_public_listener.yml

correct fields for zeek_rdp_public_listener.yml

2021-08-23 14:16:55 -04:00

zeek_smb_converted_win_atsvc_task.yml

att&ck tags review: web, network/zeek

2020-09-03 17:06:37 +03:00

zeek_smb_converted_win_impacket_secretdump.yml

Update zeek_smb_converted_win_impacket_secretdump.yml

2020-11-28 19:02:53 +01:00

zeek_smb_converted_win_lm_namedpipe.yml

att&ck tags review: web, network/zeek

2020-09-03 17:06:37 +03:00

zeek_smb_converted_win_susp_psexec.yml

Update zeek_smb_converted_win_susp_psexec.yml

2020-11-28 19:05:22 +01:00

zeek_smb_converted_win_susp_raccess_sensitive_fext.yml

Update zeek_smb_converted_win_susp_raccess_sensitive_fext.yml

2020-10-15 23:14:34 -03:00

zeek_smb_converted_win_transferring_files_with_credential_data.yml

att&ck tags review: web, network/zeek

2020-09-03 17:06:37 +03:00

zeek_susp_kerberos_rc4.yml

test author for Detection Rule License 1.1

2021-08-14 19:16:36 +02:00

zeek-dce_rpc_domain_user_enumeration.yml

att&ck tags review: web, network/zeek

2020-09-03 17:06:37 +03:00