Aaron Hoffmann 1adc816296 Merge PR #4604 from @AaronHoffmannRL - Add external IP lookup API hostnames ...

update: Suspicious Network Connection to IP Lookup Service APIs - add several external IP lookup services to existing list
update: Suspicious DNS Query for IP Lookup Service APIs - add several external IP lookup services to existing list

---------

Co-authored-by: Nasreddine Bencherchali <8741929+nasbench@users.noreply.github.com>

2023-12-01 15:08:53 +01:00

..

dns_query_win_anonymfiles_com.yml

Merge PR #4611 from @nasbench - Promote Older Rules Status From experimental To test

2023-12-01 12:50:36 +01:00

dns_query_win_appinstaller.yml

Merge PR #4557 from @swachchhanda000 - Multiple Rule Updates & New Rules

2023-11-14 09:46:39 +01:00

dns_query_win_devtunnels_communication.yml

Merge PR #4580 from @deFr0ggy - Update VsCode/DevTunnels Communication Related Rules

2023-11-20 13:22:15 +01:00

dns_query_win_dns_server_discovery_via_ldap_query.yml

Merge PR #4427 from @nasbench - Multiple Fixes & Enhancements

2023-10-04 19:06:57 +02:00

dns_query_win_hybridconnectionmgr_servicebus.yml

feat: new rules and updates

2023-01-17 01:00:44 +01:00

dns_query_win_mal_cobaltstrike.yml

chore: add nextron authors tag

2023-02-01 11:14:59 +01:00

dns_query_win_mega_nz.yml

Merge PR #4427 from @nasbench - Multiple Fixes & Enhancements

2023-10-04 19:06:57 +02:00

dns_query_win_regsvr32_dns_query.yml

Merge PR #4427 from @nasbench - Multiple Fixes & Enhancements

2023-10-04 19:06:57 +02:00

dns_query_win_remote_access_software_domains_non_browsers.yml

Merge PR #4482 From @nasbench - Add New Automation Workflows

2023-10-18 11:53:44 +02:00

dns_query_win_susp_external_ip_lookup.yml

Merge PR #4604 from @AaronHoffmannRL - Add external IP lookup API hostnames

2023-12-01 15:08:53 +01:00

dns_query_win_teamviewer_domain_query_by_uncommon_app.yml

Merge PR #4427 from @nasbench - Multiple Fixes & Enhancements

2023-10-04 19:06:57 +02:00

dns_query_win_tor_onion_domain_query.yml

Merge PR #4427 from @nasbench - Multiple Fixes & Enhancements

2023-10-04 19:06:57 +02:00

dns_query_win_ufile_io_query.yml

Merge PR #4427 from @nasbench - Multiple Fixes & Enhancements

2023-10-04 19:06:57 +02:00

dns_query_win_vscode_tunnel_communication.yml

Merge PR #4580 from @deFr0ggy - Update VsCode/DevTunnels Communication Related Rules

2023-11-20 13:22:15 +01:00