yugoslavskiy c8ee6e9631 Merge pull request #504 from yugoslavskiy/oscd_ilyas_ochkov ...

[OSCD] Ilyas Ochkov contribution

2019-11-14 00:22:48 +03:00

..

proxy_apt40.yml

Added APT40 Dropbox exfiltration proxy rule

2019-06-07 14:03:41 +02:00

proxy_chafer_malware.yml

Update proxy_chafer_malware.yml

2019-10-21 11:19:59 +02:00

proxy_cobalt_amazon.yml

ATT&CK tagging QA

2018-09-20 12:44:44 +02:00

proxy_cobalt_ocsp.yml

CobaltStrike Malleable OCSP) Profile with Typo (OSCP) in URL

2019-02-06 10:58:48 +01:00

proxy_cobalt_onedrive.yml

Initial Commit Cobalt Malleable for OneDrive

2019-02-06 10:59:02 +01:00

proxy_download_susp_dyndns.yml

Removed duplicate filters

2019-01-25 12:21:57 +03:00

proxy_download_susp_tlds_blacklist.yml

New custom suspicious TLD in rule ".pw"

2019-03-03 10:58:12 +01:00

proxy_download_susp_tlds_whitelist.yml

Massive Title Cleanup

2018-01-27 10:57:30 +01:00

proxy_downloadcradle_webdav.yml

Update_WebDAV

2018-05-16 13:05:15 +10:00

proxy_empty_ua.yml

Simplified rule

2018-11-21 22:34:04 +01:00

proxy_ios_implant.yml

Update proxy_ios_implant.yml

2019-10-21 11:20:11 +02:00

proxy_powershell_ua.yml

Change All "str" references to be "list"to mach schema update

2018-01-28 02:24:16 +03:00

proxy_susp_flash_download_loc.yml

Bugfix in Flash Downloader Rule

2018-06-30 23:39:38 +02:00

proxy_suspicious_reverse_connect_via_http_proxy.yml

ilyas ochkov contribution

2019-10-29 03:44:22 +03:00

proxy_telegram_api.yml

Rules: Telegram Bot API access

2018-06-05 16:25:43 +02:00

proxy_ua_apt.yml

rule: proxy ua unknown zero day implant

2019-09-24 18:24:48 +02:00

proxy_ua_bitsadmin_susp_tld.yml

Rule: renamed bitsadmin rule

2019-03-08 16:25:16 +01:00

proxy_ua_cryptominer.yml

rule: added date to crypto miner rule

2019-10-21 13:24:33 +02:00

proxy_ua_frameworks.yml

Rule: another MSF payload user agent

2019-04-20 09:38:41 +02:00

proxy_ua_hacktool.yml

Rule: Added malware UA

2018-09-08 10:22:26 +02:00

proxy_ua_malware.yml

rule: proxy malware ua - Zebrocy

2019-10-26 14:20:29 +02:00

proxy_ua_suspicious.yml

rules: teardown implant, apt28 ua

2019-08-30 11:53:55 +02:00