security-tools/blue-team-tools
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
f47604b7355bf91c759fec229bfe6efdbc0290b2
blue-team-tools/rules/windows/powershell
T
History
Swachchhanda Shrawan Poudel 5d050fb8a5 Merge PR #5228 from @swachchhanda000 - Update Eventlog clearing related rules 
update: Suspicious Eventlog Clear - Added coverage for eventlog clearing using dotnet class
update: Suspicious Eventlog Clearing or Configuration Change Activity- Added coverage for eventlog clearing using dotnet class

---------

Co-authored-by: Nasreddine Bencherchali <nasreddineb@splunk.com>
2025-04-17 00:45:10 +02:00
..
powershell_classic
Merge PR #5211 from @HannesWid - Update Nslookup PowerShell Download Cradle
2025-03-05 00:17:38 +01:00
powershell_module
Merge PR #5204 from @swachchhanda000 - Update Malicious PowerShell Scripts and Cmdlets Rules
2025-03-05 00:21:08 +01:00
powershell_script
Merge PR #5228 from @swachchhanda000 - Update Eventlog clearing related rules
2025-04-17 00:45:10 +02:00