phantinuss 043747822f fix: more falsepositives harmonization

2022-03-16 14:57:06 +01:00

..

zeek_dce_rpc_domain_user_enumeration.yml

remove invalid tag

2022-01-19 18:23:30 +01:00

zeek_dce_rpc_mitre_bzar_execution.yml

fix: more falsepositives harmonization

2022-03-16 14:57:06 +01:00

zeek_dce_rpc_mitre_bzar_persistence.yml

fix: more falsepositives harmonization

2022-03-16 14:57:06 +01:00

zeek_dce_rpc_potential_petit_potam_efs_rpc_call.yml

Missing status in rules (#2284)

2021-11-19 22:32:26 +01:00

zeek_dce_rpc_printnightmare_print_driver_install.yml

Simple Quote

2022-01-11 13:40:53 +01:00

zeek_dce_rpc_smb_spoolss_named_pipe.yml

Missing status in rules (#2284)

2021-11-19 22:32:26 +01:00

zeek_default_cobalt_strike_certificate.yml

fix: none --> Unknown

2022-03-16 14:19:21 +01:00

zeek_dns_mining_pools.yml

remove invalid tag

2022-01-19 18:23:30 +01:00

zeek_dns_suspicious_zbit_flag.yml

Update zeek_dns_suspicious_zbit_flag.yml

2022-02-24 20:03:56 -05:00

zeek_dns_torproxy.yml

Change double quote to quote

2022-01-06 14:02:35 +01:00

zeek_http_executable_download_from_webdav.yml

fix: unknown --> Unknown

2022-03-16 13:43:54 +01:00

zeek_http_omigod_no_auth_rce.yml

Change double quote to quote

2022-01-06 14:02:35 +01:00

zeek_http_webdav_put_request.yml

fix: unknown --> Unknown

2022-03-16 13:43:54 +01:00

zeek_rdp_public_listener.yml

remove invalid tag

2022-01-19 18:23:30 +01:00

zeek_smb_converted_win_atsvc_task.yml

fix: unknown --> Unknown

2022-03-16 13:43:54 +01:00

zeek_smb_converted_win_impacket_secretdump.yml

fix: remove penetration test as valid false positive reason

2022-03-16 14:33:18 +01:00

zeek_smb_converted_win_lm_namedpipe.yml

remove invalid tag

2022-01-19 18:23:30 +01:00

zeek_smb_converted_win_susp_psexec.yml

fix: more falsepositives harmonization

2022-03-16 14:57:06 +01:00

zeek_smb_converted_win_susp_raccess_sensitive_fext.yml

Change status for old rules

2021-11-27 11:33:14 +01:00

zeek_smb_converted_win_transferring_files_with_credential_data.yml

remove invalid tag

2022-01-19 18:23:30 +01:00

zeek_susp_kerberos_rc4.yml

remove invalid tag

2022-01-19 18:23:30 +01:00