Florian Roth ed2ab816be refactor: BITS rules new and reworked

2022-06-10 13:16:40 +02:00

..

proxy_apt40.yml

remove invalid tag

2022-01-19 18:23:30 +01:00

proxy_apt_domestic_kitten.yml

…

proxy_baby_shark.yml

…

proxy_chafer_malware.yml

remove invalid tag

2022-01-19 18:23:30 +01:00

proxy_cobalt_amazon.yml

remove invalid tag

2022-01-19 18:23:30 +01:00

proxy_cobalt_malformed_uas.yml

remove invalid tag

2022-01-19 18:23:30 +01:00

proxy_cobalt_ocsp.yml

refactor: BITS rules new and reworked

2022-06-10 13:16:40 +02:00

proxy_cobalt_onedrive.yml

remove invalid tag

2022-01-19 18:23:30 +01:00

proxy_download_susp_dyndns.yml

…

proxy_download_susp_tlds_blacklist.yml

remove invalid tag

2022-01-19 18:23:30 +01:00

proxy_download_susp_tlds_whitelist.yml

remove invalid tag

2022-01-19 18:23:30 +01:00

proxy_downloadcradle_webdav.yml

remove invalid tag

2022-01-19 18:23:30 +01:00

proxy_empire_ua_uri_combos.yml

remove invalid tag

2022-01-19 18:23:30 +01:00

proxy_empty_ua.yml

…

proxy_ios_implant.yml

remove invalid tag

2022-01-19 18:23:30 +01:00

proxy_java_class_download.yml

Update proxy_java_class_download.yml

2021-12-21 13:22:47 +01:00

proxy_powershell_ua.yml

…

proxy_pwndrop.yml

remove invalid tag

2022-01-19 18:23:30 +01:00

proxy_raw_paste_service_access.yml

remove invalid tag

2022-01-19 18:23:30 +01:00

proxy_susp_flash_download_loc.yml

remove invalid tag

2022-01-19 18:23:30 +01:00

proxy_telegram_api.yml

chore: test rules: reactivate single value list check

2022-05-10 17:13:04 +02:00

proxy_turla_comrat.yml

remove invalid tag

2022-01-19 18:23:30 +01:00

proxy_ua_apt.yml

…

proxy_ua_bitsadmin_susp_ip.yml

refactor: BITS rules new and reworked

2022-06-10 13:16:40 +02:00

proxy_ua_bitsadmin_susp_tld.yml

Adds allow for spotify streaming, which uses this service

2022-05-09 20:38:25 +00:00

proxy_ua_cryptominer.yml

…

proxy_ua_frameworks.yml

…

proxy_ua_hacktool.yml

…

proxy_ua_malware.yml

…

proxy_ua_susp.yml

Renamed suspicious in filenames to susp

2022-05-19 09:37:04 +02:00

proxy_ursnif_malware_c2_url.yml

remove invalid tag

2022-01-19 18:23:30 +01:00

proxy_ursnif_malware_download_url.yml

…