Files
blue-team-tools/rules/category
Nasreddine Bencherchali 52e39113b9 Merge PR #4503 from @nasbench - Multiple Updates & Fixes
fix: Suspicious Sysmon as Execution Parent - Typo and restructure
update: Antivirus PrinterNightmare CVE-2021-34527 Exploit Detection
update: Antivirus Relevant File Paths Alerts
update: Dump Ntds.dit To Suspicious Location
update: MSI Installation From Suspicious Locations
update: PowerShell Profile Modification - Reduce rule level to medium
update: Obfuscated IP Download Activity

---------

Co-authored-by: frack113 <62423083+frack113@users.noreply.github.com>
2023-10-28 12:55:32 +02:00
..
2023-01-10 06:24:48 +01:00