blue-team-tools

Files

T

Swachchhanda Shrawan Poudel 2f84ca2f16 Merge PR #5433 from @swachchhanda000 - Add BadSuccessor dMSA Abuse Related Rules

new: msDS-ManagedAccountPrecededByLink Attribute Modified
new: New MsDS-DelegatedManagedServiceAccount (DMSA) Object Created
new: DMSA Service Account Created in Specific OUs - PowerShell
new: DMSA Link Attributes Modified
new: New DMSA Service Account Created in Specific OUs

---------

Co-authored-by: phantinuss <79651203+phantinuss@users.noreply.github.com>
Co-authored-by: nasbench <8741929+nasbench@users.noreply.github.com>

2026-03-30 12:27:13 +02:00

cloud

Merge PR #5793 from @nasbench - Rename Auditd Folder Entries and update SYSCALL field

2025-12-08 16:03:55 +01:00

windows

Merge PR #5433 from @swachchhanda000 - Add BadSuccessor dMSA Abuse Related Rules

2026-03-30 12:27:13 +02:00

README.md

chore: move more rules

2023-04-21 15:01:48 +02:00

README.md

TBD