Logo
Explore Help
Sign In
security-tools/blue-team-tools
1
0
Fork 0
You've already forked blue-team-tools
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
eefaa1759972acff76247ff237c8ce9e554d516e
blue-team-tools/rules/windows/powershell/powershell_classic
T
History
Florian Roth 921d46ca79 fix: FPs noticed with Aurora
2022-02-21 18:43:18 +01:00
..
posh_pc_alternate_powershell_hosts.yml
fix: FPs noticed with Aurora
2022-02-21 18:43:18 +01:00
posh_pc_delete_volume_shadow_copies.yml
Rename powershell_classic
2022-01-15 10:30:03 +01:00
posh_pc_downgrade_attack.yml
remove invalid tag
2022-01-19 18:23:30 +01:00
posh_pc_exe_calling_ps.yml
remove invalid tag
2022-01-19 18:23:30 +01:00
posh_pc_powercat.yml
Rename powershell_classic
2022-01-15 10:30:03 +01:00
posh_pc_remote_powershell_session.yml
remove invalid tag
2022-01-19 18:23:30 +01:00
posh_pc_renamed_powershell.yml
remove invalid tag
2022-01-19 18:23:30 +01:00
posh_pc_susp_athremotefxvgpudisablementcommand.yml
Rename powershell_classic
2022-01-15 10:30:03 +01:00
posh_pc_susp_get_nettcpconnection.yml
Rename powershell_classic
2022-01-15 10:30:03 +01:00
posh_pc_susp_zip_compress.yml
Rename powershell_classic
2022-01-15 10:30:03 +01:00
posh_pc_suspicious_download.yml
remove invalid tag
2022-01-19 18:23:30 +01:00
posh_pc_tamper_with_windows_defender.yml
Rename powershell_classic
2022-01-15 10:30:03 +01:00
posh_pc_wsman_com_provider_no_powershell.yml
Rename powershell_classic
2022-01-15 10:30:03 +01:00
posh_pc_xor_commandline.yml
remove invalid tag
2022-01-19 18:23:30 +01:00
Powered by Gitea Version: 1.26.1 Page: 22ms Template: 3ms
Auto
English
Bahasa Indonesia Deutsch English Español Français Gaeilge Italiano Latviešu Magyar nyelv Nederlands Polski Português de Portugal Português do Brasil Suomi Svenska Türkçe Čeština Ελληνικά Български Русский Українська فارسی മലയാളം 日本語 简体中文 繁體中文(台灣) 繁體中文(香港) 한국어
Licenses API