Actions: rabbitstack/fibratus
Actions
347 workflow runs
347 workflow runs
Suspicious object symbolic link creation rule
pr
#693:
Pull request #463
synchronize
by
rabbitstack
Potential process injection via tainted memory section rule
pr
#692:
Pull request #460
synchronize
by
rabbitstack
Suspicious object symbolic link creation rule
pr
#689:
Pull request #463
opened
by
rabbitstack
Potential process injection via tainted memory section rule
pr
#688:
Pull request #460
synchronize
by
rabbitstack
Potential process injection via tainted memory section rule
pr
#686:
Pull request #460
synchronize
by
rabbitstack
Potential process injection via tainted memory section rule
pr
#684:
Pull request #460
opened
by
rabbitstack
rename_file and read_file macros
pr
#679:
Pull request #446
synchronize
by
rabbitstack
Potential process hollowing rule
pr
#678:
Pull request #450
synchronize
by
ghost
Script interpreter host or untrusted process persistence rule
pr
#677:
Pull request #451
synchronize
by
ghost
CompatTelRunner.exe as an exclusion in Unusual process modified registry run key rule
pr
#676:
Pull request #449
synchronize
by
ghost
Potential privilege escalation via phantom DLL hijacking rule
pr
#675:
Pull request #447
synchronize
by
ghost
rename_file and read_file macros
pr
#674:
Pull request #446
synchronize
by
ghost
ProTip!
You can narrow down the results and go further in time using created:<2025-03-08 or the other filters available.