security-tools/blue-team-tools
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
f83b8b00f2e3d0ab3dec75d63d9003086fdc390f
blue-team-tools/rules/linux/process_creation
T
History
tuan f83b8b00f2 rule detect add user to root group
2022-03-15 17:36:10 +07:00
..
proc_creation_lnx_at_command.yml
Normalization of rule names
2022-02-22 11:16:31 +01:00
proc_creation_lnx_base64_decode.yml
Normalization of rule names
2022-02-22 11:16:31 +01:00
proc_creation_lnx_bpftrace_unsafe_option_usage.yml
Normalization of rule names
2022-02-22 11:16:31 +01:00
proc_creation_lnx_clear_logs.yml
Normalization of rule names
2022-02-22 11:16:31 +01:00
proc_creation_lnx_clear_syslog.yml
Normalization of rule names
2022-02-22 11:16:31 +01:00
proc_creation_lnx_clipboard_collection.yml
Normalization of rule names
2022-02-22 11:16:31 +01:00
proc_creation_lnx_crypto_mining.yml
Normalization of rule names
2022-02-22 11:16:31 +01:00
proc_creation_lnx_dd_file_overwrite.yml
Normalization of rule names
2022-02-22 11:16:31 +01:00
proc_creation_lnx_doas_execution.yml
Normalization of rule names
2022-02-22 11:16:31 +01:00
proc_creation_lnx_file_and_directory_discovery.yml
Normalization of rule names
2022-02-22 11:16:31 +01:00
proc_creation_lnx_file_deletion.yml
Normalization of rule names
2022-02-22 11:16:31 +01:00
proc_creation_lnx_install_root_certificate.yml
Normalization of rule names
2022-02-22 11:16:31 +01:00
proc_creation_lnx_local_account.yml
Normalization of rule names
2022-02-22 11:16:31 +01:00
proc_creation_lnx_local_groups.yml
Normalization of rule names
2022-02-22 11:16:31 +01:00
proc_creation_lnx_network_service_scanning.yml
Normalization of rule names
2022-02-22 11:16:31 +01:00
proc_creation_lnx_omigod_scx_runasprovider_executescript.yml
Normalization of rule names
2022-02-22 11:16:31 +01:00
proc_creation_lnx_omigod_scx_runasprovider_executeshellcommand.yml
Normalization of rule names
2022-02-22 11:16:31 +01:00
proc_creation_lnx_process_discovery.yml
Normalization of rule names
2022-02-22 11:16:31 +01:00
proc_creation_lnx_remote_system_discovery.yml
Normalization of rule names
2022-02-22 11:16:31 +01:00
proc_creation_lnx_schedule_task_job_cron.yml
Normalization of rule names
2022-02-22 11:16:31 +01:00
proc_creation_lnx_security_software_discovery.yml
Normalization of rule names
2022-02-22 11:16:31 +01:00
proc_creation_lnx_security_tools_disabling.yml
Normalization of rule names
2022-02-22 11:16:31 +01:00
proc_creation_lnx_sed_command.yml
Update rule use sed
2022-03-14 22:13:14 +07:00
proc_creation_lnx_system_info_discovery.yml
Normalization of rule names
2022-02-22 11:16:31 +01:00
proc_creation_lnx_system_network_connections_discovery.yml
Normalization of rule names
2022-02-22 11:16:31 +01:00
proc_creation_lnx_system_network_discovery.yml
Normalization of rule names
2022-02-22 11:16:31 +01:00
proc_creation_lnx_usermod_command.yml
rule detect add user to root group
2022-03-15 17:36:10 +07:00
proc_creation_lnx_webshell_detection.yml
Normalization of rule names
2022-02-22 11:16:31 +01:00