Files
blue-team-tools/rules
frack113 ffcb5855f5 Merge PR #4309 from @frack113 - New Rules & Update Related To Electron Apps Abuse
new: Potentially Suspicious Electron Application CommandLine
update: Suspicious Electron Application Child Processes - Increase coverage

---------

Signed-off-by: frack113 <62423083+frack113@users.noreply.github.com>
Co-authored-by: Nasreddine Bencherchali <8741929+nasbench@users.noreply.github.com>
Co-authored-by: phantinuss <79651203+phantinuss@users.noreply.github.com>
2023-09-06 15:11:19 +02:00
..
2023-04-21 15:01:48 +02:00