SigmaHQ/rules
Andreas Hunkeler e1ef13bb24
Update ngrok usage rule
* Add further reference
* Add new selection
* Add WinRM and SMB ports to selection
* Add authtoken string for authentication of a ngrok client
* Add fp link for https://docs.microsoft.com/en-us/azure/bot-service/bot-service-debug-channel-ngrok?view=azure-bot-service-4.0
2021-06-07 17:20:18 +02:00
..
application Fixed my git issue 2020-09-13 22:03:04 -06:00
apt fixing test runner issues 2020-09-15 15:45:33 -06:00
cloud Add AWS snapshot exfiltration rule 2021-05-17 13:00:01 -07:00
compliance fix **firewall** is a category like in all other rules 2021-05-30 09:43:29 +02:00
generic Fixed my git issue 2020-09-13 22:03:04 -06:00
linux Fix auditd is a service 2021-05-30 08:58:25 +02:00
network fix typo of falsepositives 2021-05-24 10:31:28 +02:00
proxy rule: cobaltstrike malformed UAs 2021-05-10 12:43:14 +02:00
web rule: nginx core dump 2021-05-31 10:49:42 +02:00
windows Update ngrok usage rule 2021-06-07 17:20:18 +02:00