security-tools/blue-team-tools
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
db98fe79b06e803fdf23560b91534276cd571e6e
blue-team-tools/rules/windows
T
History
Florian Roth 769a9212a5 Merge pull request #943 from diskurse/rule-devel 
Webshell Recon Detection Via CommandLine & ProcessesAdd files via upload
2020-07-22 13:02:44 +02:00
..
builtin
Merge branch 'master' of https://github.com/4A616D6573/sigma into pr-785
2020-07-02 23:04:59 +02:00
deprecated
fix: buggy rule
2020-05-23 18:32:02 +02:00
driver_load
fix: bugfix and cosmetics
2020-06-24 18:10:58 +02:00
file_event
Fixes for rules in the sysmon file_event category
2020-07-03 16:22:29 -04:00
image_load
refactor: sysmon rule cleanup > generlization
2020-07-01 10:58:39 +02:00
malware
Further subtechnique updates
2020-06-17 11:31:40 -06:00
network_connection
Introduced dns_query log source category
2020-07-05 23:29:51 +02:00
other
FIX: lint error for title
2020-06-28 11:05:19 +02:00
powershell
Added new rule for pwsh_xor_cmd
2020-06-29 22:09:58 +02:00
process_access
fix: broken links
2020-07-03 11:22:06 +02:00
process_creation
Merge pull request #943 from diskurse/rule-devel
2020-07-22 13:02:44 +02:00
registry_event
Fixes for rules in new sysmon registry_event category
2020-07-03 16:20:37 -04:00
sysmon
fix: FPs with RedMimicry rule
2020-07-07 10:11:58 +02:00