Logo
Explore Help
Sign In
security-tools/blue-team-tools
1
0
Fork 0
You've already forked blue-team-tools
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
e2bfaea10fcb318a1b7e236e41b6bd5d9c9dab22
blue-team-tools/rules/windows/process_access
T
History
Bhabesh Rai 85b88c7646 Added rule for pypykatz
2021-08-03 15:06:27 +05:45
..
sysmon_cmstp_execution.yml
Merging upstream updates
2021-07-01 12:18:30 +05:45
sysmon_cred_dump_lsass_access.yml
Merging upstream updates
2021-07-01 12:18:30 +05:45
sysmon_in_memory_assembly_execution.yml
Merging upstream updates
2021-07-01 12:18:30 +05:45
sysmon_invoke_phantom.yml
Merging upstream updates
2021-07-01 12:18:30 +05:45
sysmon_lazagne_cred_dump_lsass_access.yml
Merging upstream updates
2021-07-01 12:18:30 +05:45
sysmon_load_undocumented_autoelevated_com_interface.yml
Merging upstream updates
2021-07-01 12:18:30 +05:45
sysmon_lsass_dump_comsvcs_dll.yml
Merging upstream updates
2021-07-01 12:18:30 +05:45
sysmon_lsass_memdump.yml
Merging upstream updates
2021-07-01 12:18:30 +05:45
sysmon_malware_verclsid_shellcode.yml
Merging upstream updates
2021-07-01 12:18:30 +05:45
sysmon_mimikatz_trough_winrm.yml
Merging upstream updates
2021-07-01 12:18:30 +05:45
sysmon_pypykatz_cred_dump_lsass_access.yml
Added rule for pypykatz
2021-08-03 15:06:27 +05:45
sysmon_svchost_cred_dump.yml
Merging upstream updates
2021-07-01 12:18:30 +05:45
win_susp_shell_spawn_from_winrm.yml
Merging upstream updates
2021-07-01 12:18:30 +05:45
Powered by Gitea Version: 1.26.1 Page: 93ms Template: 11ms
Auto
English
Bahasa Indonesia Deutsch English Español Français Gaeilge Italiano Latviešu Magyar nyelv Nederlands Polski Português de Portugal Português do Brasil Suomi Svenska Türkçe Čeština Ελληνικά Български Русский Українська فارسی മലയാളം 日本語 简体中文 繁體中文(台灣) 繁體中文(香港) 한국어
Licenses API