security-tools/blue-team-tools
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
fb27bee6d8d6eaac4b4d2875ae81b643553fc413
blue-team-tools/rules
T
History
Renan LAVAREC fb27bee6d8 Merge PR #5152 from @Ti-R - Fix Potentially Suspicious Volume Shadow Copy Vsstrace.dll Load 
fix: Potentially Suspicious Volume Shadow Copy Vsstrace.dll Load - Add exclusion filter `C:\ProgramData\Package Cache\{` to account for cases like the execution of `vcredist`

---------

Co-authored-by: frack113 <62423083+frack113@users.noreply.github.com>
Co-authored-by: Nasreddine Bencherchali <nasreddineb@splunk.com>
2025-01-19 22:02:29 +01:00
..
application
Merge PR #4950 from @nasbench - Comply With v2 Spec Changes
2024-08-12 12:02:50 +02:00
category
Merge PR #5068 from @ruppde - Update rules in the Antivirus category with additional strings and signature names
2024-11-04 11:45:07 +01:00
cloud
Merge PR #5157 from @joshnck - Add Azure Login Bypassing Conditional Access Policies
2025-01-19 22:00:59 +01:00
compliance
Merge PR #4950 from @nasbench - Comply With v2 Spec Changes
2024-08-12 12:02:50 +02:00
linux
Merge PR #5163 from @Neo23x0 - Add/Update Rsync Linux Rules
2025-01-19 21:55:40 +01:00
macos
Merge PR #5065 from @nasbench - Promote older rules status from experimental to test
2024-11-01 10:21:04 +01:00
network
Merge PR #5064 from @Koifman - Add missing ATT&CK tag to Monero Crypto Coin Mining Pool Lookup
2024-11-04 11:32:02 +01:00
web
Merge PR #5164 from @Neo23x0 - Update Exploit Framework User Agent
2025-01-19 21:42:40 +01:00
windows
Merge PR #5152 from @Ti-R - Fix Potentially Suspicious Volume Shadow Copy Vsstrace.dll Load
2025-01-19 22:02:29 +01:00
README.md
chore: move more rules
2023-04-21 15:01:48 +02:00

README.md

TBD

Reference in New Issue View Git Blame Copy Permalink