Swachchhanda Shrawan Poudel f05a8c4d94 Merge PR #5788 from @swachchhanda000 - Recon via RDP Logging Event ...

update: Potentially Suspicious EventLog Recon Activity Using Log Query Utilities - add more interesting event ids

---------

Co-authored-by: Nasreddine Bencherchali <nasbench@users.noreply.github.com>

2025-12-09 08:48:59 +05:45

..

rules/windows

Merge PR #5788 from @swachchhanda000 - Recon via RDP Logging Event

2025-12-09 08:48:59 +05:45

rules-emerging-threats/2025/Malware/Grixba/proc_creation_win_malware_grixba_recon

Merge PR #5707 from @YxinMiracle - Add Grixba Malware Reconnaissance Activity

2025-11-27 22:36:53 +01:00