Commit Graph

5 Commits

Author SHA1 Message Date
Ruben Groenewoud ee5fa810aa [Tuning & New Rule] Linux Reverse Shell & DR Tuning (#3254)
* [Rule Tuning & New Rule] Linux Reverse Shell

* [Tuning & New Rule] Linux Reverse Shells

* Name change

* Update rules/linux/execution_shell_via_child_tcp_utility_linux.toml

Co-authored-by: shashank-elastic <91139415+shashank-elastic@users.noreply.github.com>

* Update execution_shell_via_child_tcp_utility_linux.toml

* Update execution_shell_via_background_process.toml

---------

Co-authored-by: shashank-elastic <91139415+shashank-elastic@users.noreply.github.com>

(cherry picked from commit 84824c67fd)
2023-12-18 08:41:02 +00:00
shashank-elastic 9c271c6591 Enhance Setup Guide information (#3256)
(cherry picked from commit d52546eee5)
2023-11-03 13:41:40 +00:00
shashank-elastic 60475f6aa0 Move Setup information into setup filed (#3206)
(cherry picked from commit 7254c582c5)
2023-10-23 14:04:26 +00:00
shashank-elastic a7e83681e3 Setup information for Linux Rules - Set5 (#3188)
(cherry picked from commit 2a48db0598)
2023-10-17 13:46:52 +00:00
Ruben Groenewoud 63b817353a [New Rule] Potential Meterpreter Reverse Shell (#3007)
* [New Rule] Potential Meterpreter Reverse Shell

* Update execution_shell_via_meterpreter_linux.toml

* Update execution_shell_via_meterpreter_linux.toml

* Update rules/linux/execution_shell_via_meterpreter_linux.toml

Co-authored-by: Mika Ayenson <Mikaayenson@users.noreply.github.com>

---------

Co-authored-by: Colson Wilhoit <48036388+DefSecSentinel@users.noreply.github.com>
Co-authored-by: Mika Ayenson <Mikaayenson@users.noreply.github.com>

(cherry picked from commit 15e71ec2e8)
2023-09-07 15:10:01 +00:00