blue-team-tools

Files

T

t-pol d7206ad1de Merge PR #4685 from @t-pol - Add EDR-Silencer rule based on filter name indicator

new: HackTool - EDRSilencer Execution - Filter Added 

---------

Co-authored-by: nasbench <8741929+nasbench@users.noreply.github.com>
Co-authored-by: phantinuss <79651203+phantinuss@users.noreply.github.com>

2024-01-29 11:58:14 +01:00

application

chore: promote older rules status from experimental to test (#4651 )

2024-01-01 09:00:51 +01:00

category

Merge PR #4533 from @nasbench - Promote experimental rules

2023-11-02 10:48:45 +01:00

cloud

Merge PR #4621 from @zestsg - Add New GCP / Google Workspace Related Rules

2024-01-12 12:49:02 +01:00

compliance

feat: filename test enhancements (#3812 )

2022-12-23 09:25:16 +01:00

linux

chore: promote older rules status from experimental to test (#4651 )

2024-01-01 09:00:51 +01:00

macos

Merge PR #4649 from @slincoln-aiq - System Information Discovery Using System_Profiler

2024-01-10 14:29:49 +01:00

network

Merge PR #4597 from @nasbench - Update Process Access Rules

2023-12-04 01:14:15 +01:00

web

Merge PR #4614 from @X-Junior - updates for multiple rules 4-12-2023

2023-12-11 10:42:44 +01:00

windows

Merge PR #4685 from @t-pol - Add EDR-Silencer rule based on filter name indicator

2024-01-29 11:58:14 +01:00

README.md

chore: move more rules

2023-04-21 15:01:48 +02:00

README.md

TBD