security-tools/blue-team-tools
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
fa85c19b973fae2ad9d0b4fa24456c71d04c9c3b
blue-team-tools/rules/windows/dns_query
T
History
citronninja 3f8eb891e8 Merge PR #4463 from @citronninja - Add New Rules Related to VsCode Tunnel Usage & Abuse 
new: VsCode Code Tunnel Execution File Indicator
new: DNS Query To Devtunnels And VsCode Tunnels
new: Visual Studio Code Tunnel Remote File Creation
new: Renamed VsCode Code Tunnel Execution - File Indicator
new: Visual Studio Code Tunnel Execution
new: Visual Studio Code Tunnel Shell Execution
new: Renamed Visual Studio Code Tunnel Execution
new: Visual Studio Code Tunnel Service Installation
update: Potentially Suspicious Child Process Of VsCode

---------

Co-authored-by: Kylian ALAZARD <k.alazard@ucd481d7e4c92c.np-estoc.fr>
Co-authored-by: frack113 <62423083+frack113@users.noreply.github.com>
Co-authored-by: nasbench <8741929+nasbench@users.noreply.github.com>
2023-10-28 12:42:55 +02:00
..
dns_query_win_anonymfiles_com.yml
chore: add nextron authors tag
2023-02-01 11:14:59 +01:00
dns_query_win_dns_server_discovery_via_ldap_query.yml
Merge PR #4427 from @nasbench - Multiple Fixes & Enhancements
2023-10-04 19:06:57 +02:00
dns_query_win_hybridconnectionmgr_servicebus.yml
feat: new rules and updates
2023-01-17 01:00:44 +01:00
dns_query_win_lolbin_appinstaller.yml
feat: more updates and fixes
2023-01-12 01:05:48 +01:00
dns_query_win_mal_cobaltstrike.yml
chore: add nextron authors tag
2023-02-01 11:14:59 +01:00
dns_query_win_mega_nz.yml
Merge PR #4427 from @nasbench - Multiple Fixes & Enhancements
2023-10-04 19:06:57 +02:00
dns_query_win_regsvr32_dns_query.yml
Merge PR #4427 from @nasbench - Multiple Fixes & Enhancements
2023-10-04 19:06:57 +02:00
dns_query_win_remote_access_software_domains_non_browsers.yml
Merge PR #4482 From @nasbench - Add New Automation Workflows
2023-10-18 11:53:44 +02:00
dns_query_win_susp_ipify.yml
Merge PR #4482 From @nasbench - Add New Automation Workflows
2023-10-18 11:53:44 +02:00
dns_query_win_teamviewer_domain_query_by_uncommon_app.yml
Merge PR #4427 from @nasbench - Multiple Fixes & Enhancements
2023-10-04 19:06:57 +02:00
dns_query_win_tor_onion_domain_query.yml
Merge PR #4427 from @nasbench - Multiple Fixes & Enhancements
2023-10-04 19:06:57 +02:00
dns_query_win_ufile_io_query.yml
Merge PR #4427 from @nasbench - Multiple Fixes & Enhancements
2023-10-04 19:06:57 +02:00
dns_query_win_vscode_tunnel_communication.yml
Merge PR #4463 from @citronninja - Add New Rules Related to VsCode Tunnel Usage & Abuse
2023-10-28 12:42:55 +02:00