blue-team-tools

Files

T

EzLucky d698b3a8aa Merge PR #5253 from @EzLucky - Potential PowerShell Console History File Access Attempt

new: Potential PowerShell Console History File Access Attempt

---------

Co-authored-by: phantinuss <79651203+phantinuss@users.noreply.github.com>
Co-authored-by: Swachchhanda Shrawan Poudel <87493836+swachchhanda000@users.noreply.github.com>

2025-09-22 12:53:59 +02:00

application

Merge PR #5452 from @david-syk - Update the MITRE ATT&CK tags for multiple rules

2025-06-04 14:39:25 +02:00

category

Merge PR #5477 from @phantinuss - chore: update MITRE tag t1219 to t1219.002

2025-06-13 10:00:52 +02:00

cloud

Merge PR #5579 from @Liran017 - Update MITRE ATT&CK tags for multiple rules

2025-08-14 14:08:21 +02:00

compliance

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

linux

Change alert level from high to medium

2025-08-29 10:34:46 +02:00

macos

Merge PR #5506 from @nasbench -promote older rules status from experimental to test

2025-07-01 10:34:38 +02:00

network

Merge PR #5492 from @swachchhanda000 - Kerberos Coercion Via DNS SPN Spoofing

2025-07-08 11:35:45 +02:00

web

Merge PR #5452 from @david-syk - Update the MITRE ATT&CK tags for multiple rules

2025-06-04 14:39:25 +02:00

windows

Merge PR #5253 from @EzLucky - Potential PowerShell Console History File Access Attempt

2025-09-22 12:53:59 +02:00

README.md

chore: move more rules

2023-04-21 15:01:48 +02:00

README.md

TBD