tr0mb1r fcc1cfbe98 Merge PR #4632 from @tr0mb1r - Add exclusion for pipe names starting with \pipe\ ...

fix: HackTool - EfsPotato Named Pipe Creation - Add exclusion for pipe names starting with `\pipe\`

---------

Co-authored-by: nasbench <8741929+nasbench@users.noreply.github.com>

2023-12-21 10:11:49 +01:00

..

pipe_created_csexec_default_pipe.yml

feat: rules update

2023-08-07 16:09:21 +02:00

pipe_created_hktl_cobaltstrike_re.yml

feat: rules update

2023-08-07 16:09:21 +02:00

pipe_created_hktl_cobaltstrike_susp_pipe_patterns.yml

Merge PR #4591 from @frack113 - Update tests to pySigma 0.10.9

2023-11-27 09:08:01 +01:00

pipe_created_hktl_cobaltstrike.yml

feat: rules update

2023-08-07 16:09:21 +02:00

pipe_created_hktl_coercedpotato.yml

Merge PR #4477 from @Neo23x0 - CoercedPotato activity

2023-10-12 12:52:45 +02:00

pipe_created_hktl_diagtrack_eop.yml

feat: rules update

2023-08-07 16:09:21 +02:00

pipe_created_hktl_efspotato.yml

Merge PR #4632 from @tr0mb1r - Add exclusion for pipe names starting with \pipe\

2023-12-21 10:11:49 +01:00

pipe_created_hktl_generic_cred_dump_tools_pipes.yml

feat: rules update

2023-08-07 16:09:21 +02:00

pipe_created_hktl_koh_default_pipe.yml

feat: rules update

2023-08-07 16:09:21 +02:00

pipe_created_mal_namedpipes.yml

Merge PR #4482 From @nasbench - Add New Automation Workflows

2023-10-18 11:53:44 +02:00

pipe_created_paexec_default_pipe.yml

chore: add nextron authors tag

2023-02-01 11:14:59 +01:00

pipe_created_powershell_alternate_host_pipe.yml

Merge PR #4491 from @nasbench - Rule Updates & Fixes

2023-10-23 10:35:57 +02:00

pipe_created_powershell_execution_pipe.yml

fix: resolves #4015

2023-02-07 14:33:56 +01:00

pipe_created_remcom_default_pipe.yml

feat: rules update

2023-08-07 16:09:21 +02:00

pipe_created_scrcons_wmi_consumer_namedpipe.yml

feat: rules update

2023-08-07 16:09:21 +02:00

pipe_created_susp_adfs_namedpipe_connection.yml

fix: FPs found in different environments

2023-04-20 09:48:47 +02:00

pipe_created_sysinternals_psexec_default_pipe_susp_location.yml

Merge PR #4427 from @nasbench - Multiple Fixes & Enhancements

2023-10-04 19:06:57 +02:00