Files
blue-team-tools/rules
Nasreddine Bencherchali f0e05ccb3c Rule Update (Batch 2)
- Added 5 more PowerShell scripts for the rule "file_event_win_powershell_exploit_scripts.yml"
- Created new rule for "certoc" lolbin to cover "Download" option as described in the LOLBAS project
- Created specific rule for the "IEExec" lolbin to cover "Download" option as described in the LOLBAS Project
- Updated some rules to use "OriginalFileName" in addition to the "Image" selection
- Updated some rules to increase coverage.
2022-05-16 22:02:41 +01:00
..
2022-05-12 17:30:30 +02:00
2022-01-19 18:23:30 +01:00
2022-05-16 22:02:41 +01:00