Merge pull request #247 from exein-io/revert-244-MITRE-ruleset

Revert "Add MITRE compatible ruleset "
exein-io · Feb 7, 2024 · f804ab1 · f804ab1
2 parents e5bc078 + 9c52838
commit f804ab1
Show file tree

Hide file tree

Showing 51 changed files with 1 addition and 1,252 deletions.
diff --git a/rules /README.md b/rules /README.md
diff --git a/rules /command_and_control/cat_network_activity.yaml b/rules /command_and_control/cat_network_activity.yaml
diff --git a/rules /command_and_control/linux_chisel_client_activity.yaml b/rules /command_and_control/linux_chisel_client_activity.yaml
diff --git a/rules /command_and_control/linux_chisel_server_activity.yaml b/rules /command_and_control/linux_chisel_server_activity.yaml
diff --git a/rules /command_and_control/linux_kworker_netcon.yaml b/rules /command_and_control/linux_kworker_netcon.yaml
diff --git a/rules /command_and_control/linux_suspicious_proxychains_activity.yaml b/rules /command_and_control/linux_suspicious_proxychains_activity.yaml
diff --git a/rules /command_and_control/linux_tunneling_and_port_forwarding.yaml b/rules /command_and_control/linux_tunneling_and_port_forwarding.yaml
diff --git a/rules /command_and_control/suspicious_network_activity_from_unknown_executable.yaml b/rules /command_and_control/suspicious_network_activity_from_unknown_executable.yaml
diff --git a/rules /command_and_control/tunneling_via_earthworm.yaml b/rules /command_and_control/tunneling_via_earthworm.yaml
diff --git a/rules /credential_access/collection_sensitive_files.yaml b/rules /credential_access/collection_sensitive_files.yaml
diff --git a/rules /credential_access/credential_dumping.yaml b/rules /credential_access/credential_dumping.yaml
diff --git a/rules /credential_access/gdb_init_memory_dump.yaml b/rules /credential_access/gdb_init_memory_dump.yaml