blue-team-tools/rules at f9dbb1f41387ee1e9c56d2bfa9b25fff15bacc2a - blue-team-tools - GreySec Git

security-tools/blue-team-tools

Files

T

History

$frack113$ frack113 f9dbb1f413 Add proc_creation_win_findstr_susp_parent

Signed-off-by: frack113 <62423083+frack113@users.noreply.github.com>

2023-07-06 19:51:47 +02:00

..

fix:F multiple 404 links in references (#4332 )

2023-06-26 10:10:04 +01:00

feat: map antivirus categoriy to Windows Defender logs

2023-05-19 14:27:56 +02:00

Update rules/cloud/okta/okta_fastpass_phishing_detection.yml

2023-05-10 01:18:00 -05:00

feat: filename test enhancements (#3812 )

2022-12-23 09:25:16 +01:00

fix:F multiple 404 links in references (#4332 )

2023-06-26 10:10:04 +01:00

feat: new macos rule Suspicious Browser Child Process (#4053 )

2023-04-05 14:58:09 +02:00

Update net_dns_wannacry_killswitch_domain.yml

2023-06-26 13:31:05 -04:00

chore: fix typo of lowercase Windows in description

2023-06-21 09:52:43 +02:00

Add proc_creation_win_findstr_susp_parent

2023-07-06 19:51:47 +02:00

README.md

chore: move more rules

2023-04-21 15:01:48 +02:00

README.md

TBD