Florian Roth c0b93a010c NCCGroup rules from rclone blog post ...

https://research.nccgroup.com/2021/05/27/detecting-rclone-an-effective-tool-for-exfiltration/

2021-05-27 12:49:40 +02:00

..

dns_mega_nz.yml

NCCGroup rules from rclone blog post

2021-05-27 12:49:40 +02:00

sysmon_possible_dns_rebinding.yml

- Remove 'service: sysmon' since defining the categories made the rules generic

2020-10-02 09:37:52 +02:00