Michael Haag d28bcf45f4 Delete ssa___wbadmin_delete_system_backups.yml

2022-03-18 12:00:07 -06:00

..

ssa___anomalous_usage_of_archive_tools.yml

SSA add risk_score to package

2022-03-18 07:50:37 +01:00

ssa___attempt_to_delete_services.yml

SSA add risk_score to package

2022-03-18 07:50:37 +01:00

ssa___attempt_to_disable_services.yml

SSA add risk_score to package

2022-03-18 07:50:37 +01:00

ssa___attempted_credential_dump_from_registry_via_reg_exe.yml

SSA add risk_score to package

2022-03-18 07:50:37 +01:00

ssa___bcdedit_failure_recovery_modification.yml

SSA add risk_score to package

2022-03-18 07:50:37 +01:00

ssa___clear_unallocated_sector_using_cipher_app.yml

SSA add risk_score to package

2022-03-18 07:50:37 +01:00

ssa___delete_a_net_user.yml

SSA add risk_score to package

2022-03-18 07:50:37 +01:00

ssa___deny_permission_using_cacls_utility.yml

SSA add risk_score to package

2022-03-18 07:50:37 +01:00

ssa___detect_dump_lsass_memory_using_comsvcs.yml

SSA add risk_score to package

2022-03-18 07:50:37 +01:00

ssa___detect_prohibited_applications_spawning_cmd_exe.yml

SSA add risk_score to package

2022-03-18 07:50:37 +01:00

ssa___detect_rclone_command_line_usage.yml

SSA add risk_score to package

2022-03-18 07:50:37 +01:00

ssa___disable_net_user_account.yml

SSA add risk_score to package

2022-03-18 07:50:37 +01:00

ssa___dns_exfiltration_using_nslookup_app.yml

SSA add risk_score to package

2022-03-18 07:50:37 +01:00

ssa___fsutil_zeroing_file.yml

SSA add risk_score to package

2022-03-18 07:50:37 +01:00

ssa___grant_permission_using_cacls_utility.yml

SSA add risk_score to package

2022-03-18 07:50:37 +01:00

ssa___hiding_files_and_directories_with_attrib_exe.yml

SSA add risk_score to package

2022-03-18 07:50:37 +01:00

ssa___modify_acls_permission_of_files_or_folders.yml

SSA add risk_score to package

2022-03-18 07:50:37 +01:00

ssa___resize_shadowstorage_volume.yml

SSA add risk_score to package

2022-03-18 07:50:37 +01:00

ssa___sdelete_application_execution.yml

SSA add risk_score to package

2022-03-18 07:50:37 +01:00

ssa___system_process_running_from_unexpected_location.yml

SSA add risk_score to package

2022-03-18 07:50:37 +01:00

ssa___tcp_command_and_scripting_interpreter_outbound_ldap_traffic.yml

SSA add risk_score to package

2022-03-18 07:50:37 +01:00

ssa___wevtutil_usage_to_clear_logs.yml

SSA add risk_score to package

2022-03-18 07:50:37 +01:00

ssa___wevtutil_usage_to_disable_logs.yml

SSA add risk_score to package

2022-03-18 07:50:37 +01:00

ssa___windows_bits_job_persistence.yml

SSA add risk_score to package

2022-03-18 07:50:37 +01:00

ssa___windows_bitsadmin_download_file.yml

SSA add risk_score to package

2022-03-18 07:50:37 +01:00

ssa___windows_certutil_decode_file.yml

SSA add risk_score to package

2022-03-18 07:50:37 +01:00

ssa___windows_certutil_urlcache_download.yml

SSA add risk_score to package

2022-03-18 07:50:37 +01:00

ssa___windows_certutil_verifyctl_download.yml

SSA add risk_score to package

2022-03-18 07:50:37 +01:00

ssa___windows_curl_upload_to_remote_destination.yml

SSA add risk_score to package

2022-03-18 07:50:37 +01:00

ssa___windows_diskshadow_proxy_execution.yml

SSA add risk_score to package

2022-03-18 07:50:37 +01:00

ssa___windows_eventvwr_uac_bypass.yml

SSA add risk_score to package

2022-03-18 07:50:37 +01:00

ssa___windows_mshta_child_process.yml

SSA add risk_score to package

2022-03-18 07:50:37 +01:00

ssa___windows_mshta_command_line_url.yml

SSA add risk_score to package

2022-03-18 07:50:37 +01:00

ssa___windows_mshta_inline_hta_execution.yml

SSA add risk_score to package

2022-03-18 07:50:37 +01:00

ssa___windows_powershell_connect_to_internet_with_hidden_window.yml

SSA add risk_score to package

2022-03-18 07:50:37 +01:00

ssa___windows_powershell_downloadfile.yml

SSA add risk_score to package

2022-03-18 07:50:37 +01:00

ssa___windows_powershell_start_bitstransfer.yml

SSA add risk_score to package

2022-03-18 07:50:37 +01:00

ssa___windows_rasautou_dll_execution.yml

SSA add risk_score to package

2022-03-18 07:50:37 +01:00

ssa___windows_rundll32_inline_hta_execution.yml

SSA add risk_score to package

2022-03-18 07:50:37 +01:00