2 Commits

Author	SHA1	Message	Date
Ruben Groenewoud	a71bbe0cf8	[Rule Tuning] Misc. DR Rule Tuning - Part 2 (#3905) ... * [Rule Tuning] Misc. DR Rule Tuning - Part 2 * ++ * Update privilege_escalation_suspicious_uid_guid_elevation.toml * Update rules/linux/persistence_systemd_service_creation.toml --------- Co-authored-by: Jonhnathan <26856693+w0rk3r@users.noreply.github.com>	2024-07-19 15:21:35 +02:00
Ruben Groenewoud	74f049cc7c	[New Rule] Network Connection Initiated by SSH Parent Process (#3759) ... * [New Rule] Network Connection Initiated by SSH Parent Process * Update persistence_ssh_netcon.toml * Update rules/linux/persistence_ssh_netcon.toml Co-authored-by: Samirbous <64742097+Samirbous@users.noreply.github.com> * Update rules/linux/persistence_ssh_netcon.toml Co-authored-by: Samirbous <64742097+Samirbous@users.noreply.github.com> * Update persistence_ssh_netcon.toml * Update persistence_ssh_netcon.toml --------- Co-authored-by: Samirbous <64742097+Samirbous@users.noreply.github.com>	2024-06-10 10:30:45 +02:00