hayabusa

Files

itiB 83d891b2fa Feature/rm submodule (#312 )

* rm: submodule

* Add: rules

* Fix: hayabusa-rules to c9c10a

2021-12-20 21:14:32 +09:00

powershell_suspicious_download.yml

2021-12-20 21:14:32 +09:00

powershell_suspicious_invocation_generic.yml

2021-12-20 21:14:32 +09:00

2021-12-20 21:14:32 +09:00

powershell_syncappvpublishingserver_exe.yml

2021-12-20 21:14:32 +09:00

2021-12-20 21:14:32 +09:00

sysmon_mimikatz_detection_lsass.yml

2021-12-20 21:14:32 +09:00

sysmon_rclone_execution.yml

2021-12-20 21:14:32 +09:00

win_susp_esentutl_activity.yml

2021-12-20 21:14:32 +09:00

win_susp_rclone_exec.yml

2021-12-20 21:14:32 +09:00

win_susp_vssadmin_ntds_activity.yml

2021-12-20 21:14:32 +09:00