dan21san b063a9d755 Merge PR #5036 from @dan21san - Update Alternate PowerShell Hosts Pipe ...

update: Alternate PowerShell Hosts Pipe - Add optional filter for `AzureConnectedMachineAgent` and update old filters to be more accurate 
---------

Co-authored-by: nasbench <8741929+nasbench@users.noreply.github.com>

2024-10-08 22:17:21 +02:00

..

pipe_created_adfs_namedpipe_connection_uncommon_tool.yml

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

pipe_created_hktl_cobaltstrike_re.yml

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

pipe_created_hktl_cobaltstrike_susp_pipe_patterns.yml

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

pipe_created_hktl_cobaltstrike.yml

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

pipe_created_hktl_coercedpotato.yml

Merge PR #4991 from @nasbench - Promote older rules status from experimental to test

2024-09-02 10:01:36 +02:00

pipe_created_hktl_diagtrack_eop.yml

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

pipe_created_hktl_efspotato.yml

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

pipe_created_hktl_generic_cred_dump_tools_pipes.yml

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

pipe_created_hktl_koh_default_pipe.yml

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

pipe_created_powershell_alternate_host_pipe.yml

Merge PR #5036 from @dan21san - Update Alternate PowerShell Hosts Pipe

2024-10-08 22:17:21 +02:00

pipe_created_powershell_execution_pipe.yml

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

pipe_created_pua_csexec_default_pipe.yml

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

pipe_created_pua_paexec_default_pipe.yml

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

pipe_created_pua_remcom_default_pipe.yml

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

pipe_created_scrcons_wmi_consumer_namedpipe.yml

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

pipe_created_susp_malicious_namedpipes.yml

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

pipe_created_sysinternals_psexec_default_pipe_susp_location.yml

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00