security-tools/blue-team-tools
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity
Files
ebcfcfebf46e5dbbf7fe573a4a60b609b317cbc1
blue-team-tools/rules/windows
T
History
frack113 ebcfcfebf4 Fix field name
2021-11-20 19:14:59 +01:00
..
builtin
Fix field name
2021-11-20 19:14:59 +01:00
create_remote_thread
Fix field name
2021-11-20 19:14:59 +01:00
create_stream_hash
Merging upstream updates
2021-07-01 12:18:30 +05:45
deprecated
fix: more false positives
2021-11-17 10:27:02 +01:00
dns_query
add missing MITRE Techniques
2021-11-20 12:26:01 +01:00
driver_load
fix tags errors
2021-11-20 12:35:41 +01:00
edr
normalize logsource
2021-11-09 10:48:13 +01:00
file_delete
Add cve tags
2021-10-25 18:40:50 +02:00
file_event
fix tags errors
2021-11-20 12:35:41 +01:00
image_load
Merge pull request #2287 from frack113/tags
2021-11-20 15:38:25 +01:00
malware
add missing MITRE Techniques
2021-11-20 12:26:01 +01:00
network_connection
add missing MITRE Techniques
2021-11-20 12:26:01 +01:00
other
add missing MITRE Techniques
2021-11-20 12:26:01 +01:00
pipe_created
add missing MITRE Techniques
2021-11-20 12:26:01 +01:00
powershell
Add MITTRE Technique
2021-11-20 10:56:41 +01:00
process_access
fix: FPs with rules
2021-11-20 12:32:15 +01:00
process_creation
Add MITTRE Technique
2021-11-20 10:56:41 +01:00
raw_access_thread
fix: FPs with rules
2021-11-20 12:32:15 +01:00
registry_event
Merge pull request #2287 from frack113/tags
2021-11-20 15:38:25 +01:00
sysmon
fix: FP which happens more frequently under normal circumstances
2021-11-12 13:31:25 +01:00
wmi_event
fix: tags for WMI / execution / persistence
2021-09-01 16:34:50 +02:00