FilesExpand file tree

develop

/

stories

/

Copy path

Directory actions

More options

More options

Directory actions

More options

More options

Latest commit

 

History

History

History

 

 

develop

/

stories

/

Copy path

Top

Folders and files

Name		Name	Last commit message	Last commit date
parent directory ..
deprecated		deprecated
Icedid.yml		Icedid.yml
acidrain.yml		acidrain.yml
active_directory_discovery.yml		active_directory_discovery.yml
active_directory_kerberos_attacks.yml		active_directory_kerberos_attacks.yml
active_directory_lateral_movement.yml		active_directory_lateral_movement.yml
active_directory_password_spraying.yml		active_directory_password_spraying.yml
agenttesla.yml		agenttesla.yml
apache_struts_vulnerability.yml		apache_struts_vulnerability.yml
asset_tracking.yml		asset_tracking.yml
asyncrat.yml		asyncrat.yml
atlassian_confluence_server_and_data_center_cve_2022_26134.yml		atlassian_confluence_server_and_data_center_cve_2022_26134.yml
awfulshred.yml		awfulshred.yml
aws_cross_account_activity.yml		aws_cross_account_activity.yml
aws_defense_evasion.yml		aws_defense_evasion.yml
aws_iam_privilege_escalation.yml		aws_iam_privilege_escalation.yml
aws_identity_and_access_management_account_takeover.yml		aws_identity_and_access_management_account_takeover.yml
aws_network_acl_activity.yml		aws_network_acl_activity.yml
aws_security_hub_alerts.yml		aws_security_hub_alerts.yml
aws_user_monitoring.yml		aws_user_monitoring.yml
azorult.yml		azorult.yml
azure_active_directory_account_takeover.yml		azure_active_directory_account_takeover.yml
azure_active_directory_persistence.yml		azure_active_directory_persistence.yml
baron_samedit_cve_2021_3156.yml		baron_samedit_cve_2021_3156.yml
bishopfox_sliver_adversary_emulation_framework.yml		bishopfox_sliver_adversary_emulation_framework.yml
bits_jobs.yml		bits_jobs.yml
brand_monitoring.yml		brand_monitoring.yml
brute_ratel_c4.yml		brute_ratel_c4.yml
caddywiper.yml		caddywiper.yml
cisa_aa22_257a.yml		cisa_aa22_257a.yml
cisa_aa22_264a.yml		cisa_aa22_264a.yml
cisa_aa22_277a.yml		cisa_aa22_277a.yml
cisa_aa22_320a.yml		cisa_aa22_320a.yml
cloud_cryptomining.yml		cloud_cryptomining.yml
cloud_federated_credential_abuse.yml		cloud_federated_credential_abuse.yml
cobalt_strike.yml		cobalt_strike.yml
coldroot_macos_rat.yml		coldroot_macos_rat.yml
collection_and_staging.yml		collection_and_staging.yml
command_and_control.yml		command_and_control.yml
compromised_user_account.yml		compromised_user_account.yml
credential_dumping.yml		credential_dumping.yml
cve_2022_40684_fortinet_appliance_auth_bypass.yml		cve_2022_40684_fortinet_appliance_auth_bypass.yml
cyclops_blink.yml		cyclops_blink.yml
darkcrystal_rat.yml		darkcrystal_rat.yml
data_destruction.yml		data_destruction.yml
data_exfiltration.yml		data_exfiltration.yml
data_protection.yml		data_protection.yml
deobfuscate_decode_files_or_information.yml		deobfuscate_decode_files_or_information.yml
detect_zerologon_attack.yml		detect_zerologon_attack.yml
dev_sec_ops.yml		dev_sec_ops.yml
dhs_report_ta18_074a.yml		dhs_report_ta18_074a.yml
disabling_security_tools.yml		disabling_security_tools.yml
dns_amplification_attacks.yml		dns_amplification_attacks.yml
dns_hijacking.yml		dns_hijacking.yml
domain_controller_impersonation_&_samaccountname_spoofing.yml		domain_controller_impersonation_&_samaccountname_spoofing.yml
domain_trust_discovery.yml		domain_trust_discovery.yml
doublezerodestructor.yml		doublezerodestructor.yml
dynamic_dns.yml		dynamic_dns.yml
emotet_malware__dhs_report_ta18_201a_.yml		emotet_malware__dhs_report_ta18_201a_.yml
f5_big_ip_vulnerability_cve_2022_1388.yml		f5_big_ip_vulnerability_cve_2022_1388.yml
f5_tmui_rce_cve_2020_5902.yml		f5_tmui_rce_cve_2020_5902.yml
fin7.yml		fin7.yml
fortinet_fortinac_cve_2022_39952.yml		fortinet_fortinac_cve_2022_39952.yml
gcp_account_takeover.yml		gcp_account_takeover.yml
gcp_cross_account_activity.yml		gcp_cross_account_activity.yml
hafnium_group.yml		hafnium_group.yml
hermeticwiper.yml		hermeticwiper.yml
hidden_cobra_malware.yml		hidden_cobra_malware.yml
iis_components.yml		iis_components.yml
industroyer2.yml		industroyer2.yml
information_sabotage.yml		information_sabotage.yml
ingress_tool_transfer.yml		ingress_tool_transfer.yml
insider_threat.yml		insider_threat.yml
jboss_vulnerability.yml		jboss_vulnerability.yml
kubernetes_scanning_activity.yml		kubernetes_scanning_activity.yml
kubernetes_sensitive_object_access_activity.yml		kubernetes_sensitive_object_access_activity.yml
linux_living_off_the_land.yml		linux_living_off_the_land.yml
linux_persistence_techniques.yml		linux_persistence_techniques.yml
linux_post_exploitation.yml		linux_post_exploitation.yml
linux_privilege_escalation.yml		linux_privilege_escalation.yml
linux_rootkit.yml		linux_rootkit.yml
living_off_the_land.yml		living_off_the_land.yml
local_privilege_escalation_with_krbrelayup.yml		local_privilege_escalation_with_krbrelayup.yml
log4shell_cve_2021_44228.yml		log4shell_cve_2021_44228.yml
malicious_powershell.yml		malicious_powershell.yml
masquerading___rename_system_utilities.yml		masquerading___rename_system_utilities.yml
metasploit.yml		metasploit.yml
meterpreter.yml		meterpreter.yml
microsoft_mshtml_remote_code_execution_cve_2021_40444.yml		microsoft_mshtml_remote_code_execution_cve_2021_40444.yml
microsoft_support_diagnostic_tool_vulnerability_cve_2022_30190.yml		microsoft_support_diagnostic_tool_vulnerability_cve_2022_30190.yml
monitor_for_updates.yml		monitor_for_updates.yml
netsh_abuse.yml		netsh_abuse.yml
network_discovery.yml		network_discovery.yml
nobelium_group.yml		nobelium_group.yml
office_365_detections.yml		office_365_detections.yml
okta_mfa_exhaustion.yml		okta_mfa_exhaustion.yml
openssl_cve_2022_3602.yml		openssl_cve_2022_3602.yml
orangeworm_attack_group.yml		orangeworm_attack_group.yml
petitpotam_ntlm_relay_on_active_directory_certificate_services.yml		petitpotam_ntlm_relay_on_active_directory_certificate_services.yml
possible_backdoor_activity_associated_with_mudcarp_espionage_campaigns.yml		possible_backdoor_activity_associated_with_mudcarp_espionage_campaigns.yml
View all files