sigma-rules

Files

T

Jonhnathan 7949b8a03e [New Rule] Building Block Rules - Part 1 (#2912 )

* [New Rule] Building Block Rules - Part 1

* Update defense_evasion_powershell_clear_logs_script.toml

* Update discovery_posh_generic.toml

* .

* Apply suggestions from code review

Co-authored-by: Justin Ibarra <16747370+brokensound77@users.noreply.github.com>
Co-authored-by: Isai <59296946+imays11@users.noreply.github.com>

---------

Co-authored-by: Colson Wilhoit <48036388+DefSecSentinel@users.noreply.github.com>
Co-authored-by: Justin Ibarra <16747370+brokensound77@users.noreply.github.com>
Co-authored-by: Isai <59296946+imays11@users.noreply.github.com>

2023-07-18 20:01:43 -03:00

.gitkeep

[FR] Add support for building block rules (BBR) (#2822 )

2023-06-20 09:00:30 -04:00

collection_archive_data_zip_imageload.toml

[New Rule] Building Block Rules - Part 1 (#2912 )

2023-07-18 20:01:43 -03:00

collection_posh_compression.toml

[New Rule] Building Block Rules - Part 1 (#2912 )

2023-07-18 20:01:43 -03:00

defense_evasion_masquerading_communication_apps.toml

[New Rule] Building Block Rules - Part 1 (#2912 )