hayabusa

Files

itiB 83d891b2fa Feature/rm submodule (#312 )

* rm: submodule

* Add: rules

* Fix: hayabusa-rules to c9c10a

2021-12-20 21:14:32 +09:00

pipe_created_tool_psexec.yml

2021-12-20 21:14:32 +09:00

sysmon_alternate_powershell_hosts_pipe.yml

2021-12-20 21:14:32 +09:00

sysmon_apt_turla_namedpipes.yml

2021-12-20 21:14:32 +09:00

sysmon_cred_dump_tools_named_pipes.yml

2021-12-20 21:14:32 +09:00

sysmon_efspotato_namedpipe.yml

2021-12-20 21:14:32 +09:00

sysmon_mal_cobaltstrike_re.yml

2021-12-20 21:14:32 +09:00

sysmon_mal_cobaltstrike.yml

2021-12-20 21:14:32 +09:00

sysmon_mal_namedpipes.yml

2021-12-20 21:14:32 +09:00

sysmon_powershell_execution_pipe.yml

2021-12-20 21:14:32 +09:00

sysmon_psexec_pipes_artifacts.yml

2021-12-20 21:14:32 +09:00

sysmon_susp_adfs_namedpipe_connection.yml

2021-12-20 21:14:32 +09:00

sysmon_susp_cobaltstrike_pipe_patterns.yml

2021-12-20 21:14:32 +09:00

sysmon_susp_wmi_consumer_namedpipe.yml

2021-12-20 21:14:32 +09:00