Jonhnathan ff2c951136 [New Rule] Potential Masquerading as Communication Apps (#2780) ...

* [New Rule] Potential Masquerading as Communication Apps

* ocd

* Update defense_evasion_masquerading_communication_apps.toml

* Update defense_evasion_masquerading_communication_apps.toml

* Update rules/windows/defense_evasion_masquerading_communication_apps.toml

* Update rules/windows/defense_evasion_masquerading_communication_apps.toml

* Apply suggestions from code review

* Merge branch 'main' into comms_masquerade

* Move to BBR folder

* Revert "Merge branch 'main' into comms_masquerade"

This reverts commit 726c63c0cab782a83d9f505e54e55d4edd1f5589.

2023-06-30 11:46:54 -03:00

..

.gitkeep

[FR] Add support for building block rules (BBR) (#2822)

2023-06-20 09:00:30 -04:00

defense_evasion_masquerading_communication_apps.toml

[New Rule] Potential Masquerading as Communication Apps (#2780)

2023-06-30 11:46:54 -03:00

privilege_escalation_expired_driver_loaded.toml

[New Rule] [BBR] Expired or Revoked Driver Loaded (#2880)

2023-06-27 09:18:35 -03:00