blue-team-tools/rules at c0972b644da5c398ce038e91e9fc9366a543caa5 - blue-team-tools - GreySec Git

security-tools/blue-team-tools

Files

T

History

Mohamed Ashraf c0972b644d Merge PR #5378 from @X-Junior - fix: FP related to Potentially Suspicious WDAC Policy File Creation

update: Potentially Suspicious WDAC Policy File Creation

2025-05-12 13:31:38 +02:00

..

Merge PR #5381 from @david-syk - Update MITRE ATT&CK tags

2025-04-25 20:55:51 +02:00

Merge PR #5068 from @ruppde - Update rules in the Antivirus category with additional strings and signature names

2024-11-04 11:45:07 +01:00

Merge PR #5381 from @david-syk - Update MITRE ATT&CK tags

2025-04-25 20:55:51 +02:00

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

Merge PR #5249 from @nasbench - Promote older rules status from experimental to test

2025-04-17 00:41:35 +02:00

Merge PR #5249 from @nasbench - Promote older rules status from experimental to test

2025-04-17 00:41:35 +02:00

Merge PR #5214 from @signalblur - Add HTTP Request to Low Reputation TLD or Suspicious File Extension

2025-03-05 00:13:45 +01:00

Merge PR #5249 from @nasbench - Promote older rules status from experimental to test

2025-04-17 00:41:35 +02:00

Merge PR #5378 from @X-Junior - fix: FP related to Potentially Suspicious WDAC Policy File Creation

2025-05-12 13:31:38 +02:00

README.md

chore: move more rules

2023-04-21 15:01:48 +02:00

README.md

TBD