mirror of
https://github.com/LOLBAS-Project/LOLBAS
synced 2025-07-27 04:32:24 +02:00
Detection Resources and Other Updates (#179)
* Add detection links for scripts * Add detection links for OtherMSBins. Fixed and updated as needed. * Add detection links for MSBins. Fixed and updated as needed. * Add detection links for oslibraries * Updating template for Detections * Removing empty Detection:Sigma entries * Remove redundant blank line * Replacing commit URL with file URL Co-authored-by: root <root@DESKTOP-5CR935D.localdomain> Co-authored-by: Wietze <wietze@users.noreply.github.com>
This commit is contained in:
@@ -26,6 +26,11 @@ Code_Sample:
|
||||
Detection:
|
||||
- IOC: Event ID 10
|
||||
- IOC: binary.exe spawned
|
||||
- Analysis: https://link/to/blog/gist/writeup/if/applicable
|
||||
- Sigma: https://link/to/sigma/rule/if/applicable
|
||||
- Elastic: https://link/to/elastic/rule/if/applicable
|
||||
- Splunk: https://link/to/splunk/rule/if/applicable
|
||||
- BlockRule: https://link/to/microsoft/block/rules/if/applicable
|
||||
Resources:
|
||||
- Link: http://blogpost.com
|
||||
- Link: http://twitter.com/something
|
||||
|
Reference in New Issue
Block a user