security-tools/blue-team-tools
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
c9fe367eae00e507e870a67bfccdfc38abcf1afb
blue-team-tools/rules/windows/network_connection
T
History
Florian Roth d254c7a514 Update rules/windows/network_connection/net_connection_win_ngrok_tunnel.yml 
Co-authored-by: Nasreddine Bencherchali <8741929+nasbench@users.noreply.github.com>
2022-11-04 10:49:17 +01:00
..
net_connection_win_binary_github_com.yml
Order yaml field
2022-10-26 09:42:26 +02:00
net_connection_win_binary_susp_com.yml
Order yaml field
2022-10-26 09:42:26 +02:00
net_connection_win_certutil.yml
Order yaml field
2022-10-26 09:42:26 +02:00
net_connection_win_crypto_mining.yml
Order yaml field
2022-10-26 09:42:26 +02:00
net_connection_win_dead_drop_resolvers.yml
Order yaml field
2022-10-26 09:42:26 +02:00
net_connection_win_dllhost_net_connections.yml
Order yaml field
2022-10-26 09:42:26 +02:00
net_connection_win_eqnedt.yml
Order yaml field
2022-10-26 09:42:26 +02:00
net_connection_win_excel_outbound_network_connection.yml
Order yaml field
2022-10-26 09:42:26 +02:00
net_connection_win_hh.yml
Order yaml field
2022-10-26 09:42:26 +02:00
net_connection_win_imewdbld.yml
Order yaml field
2022-10-26 09:42:26 +02:00
net_connection_win_malware_backconnect_ports.yml
Order yaml field
2022-10-26 09:42:26 +02:00
net_connection_win_mega_nz.yml
Order yaml field
2022-10-26 09:42:26 +02:00
net_connection_win_msiexec.yml
Order yaml field
2022-10-26 09:42:26 +02:00
net_connection_win_ngrok_io.yml
Order yaml field
2022-10-26 09:42:26 +02:00
net_connection_win_ngrok_tunnel.yml
Update rules/windows/network_connection/net_connection_win_ngrok_tunnel.yml
2022-11-04 10:49:17 +01:00
net_connection_win_notepad_network_connection.yml
Order yaml field
2022-10-26 09:42:26 +02:00
net_connection_win_powershell_network_connection.yml
Order yaml field
2022-10-26 09:42:26 +02:00
net_connection_win_python.yml
Order yaml field
2022-10-26 09:42:26 +02:00
net_connection_win_rdp_reverse_tunnel.yml
old experimental rule promotion
2022-10-09 16:54:04 +02:00
net_connection_win_rdp_to_http.yml
New Rules + Update
2022-07-14 17:35:50 +01:00
net_connection_win_regsvr32_network_activity.yml
Order yaml field
2022-10-26 09:42:26 +02:00
net_connection_win_remote_powershell_session_network.yml
Order yaml field
2022-10-26 09:42:26 +02:00
net_connection_win_rundll32_net_connections.yml
Order yaml field
2022-10-26 09:42:26 +02:00
net_connection_win_script_wan.yml
Order yaml field
2022-10-26 09:42:26 +02:00
net_connection_win_script.yml
Order yaml field
2022-10-26 09:42:26 +02:00
net_connection_win_silenttrinity_stager_msbuild_activity.yml
Order yaml field
2022-10-26 09:42:26 +02:00
net_connection_win_susp_binary_no_cmdline.yml
Order yaml field
2022-10-26 09:42:26 +02:00
net_connection_win_susp_cmstp.yml
Order yaml field
2022-10-26 09:42:26 +02:00
net_connection_win_susp_dropbox_api.yml
Order yaml field
2022-10-26 09:42:26 +02:00
net_connection_win_susp_epmap.yml
Order yaml field
2022-10-26 09:42:26 +02:00
net_connection_win_susp_outbound_kerberos_connection.yml
Order yaml field
2022-10-26 09:42:26 +02:00
net_connection_win_susp_outbound_mobsync_connection.yml
Order yaml field
2022-10-26 09:42:26 +02:00
net_connection_win_susp_outbound_smtp_connections.yml
Order yaml field
2022-10-26 09:42:26 +02:00
net_connection_win_susp_prog_location_network_connection.yml
Order yaml field
2022-10-26 09:42:26 +02:00
net_connection_win_susp_rdp.yml
Order yaml field
2022-10-26 09:42:26 +02:00
net_connection_win_wuauclt_network_connection.yml
Order yaml field
2022-10-26 09:42:26 +02:00