Actions: rabbitstack/fibratus
Actions
Showing runs from all workflows
1,926 workflow runs
1,926 workflow runs
Suspicious child spawned via reflected process rule
pr
#896:
Pull request #578
synchronize
by
rabbitstack
Potential NTDLL unhooking via file mapping rule
pr
#895:
Pull request #579
synchronize
by
rabbitstack
Potential NTDLL unhooking via file mapping rule
pr
#894:
Pull request #579
synchronize
by
rabbitstack
Process execution from remote memory section rule
pr
#893:
Pull request #580
synchronize
by
rabbitstack
Credential Manager access via known tools rule
pr
#892:
Pull request #582
synchronize
by
rabbitstack
Credential Manager access via known tools rule
pr
#891:
Pull request #582
opened
by
rabbitstack
Clickfix phishing via browser dialog box rule
pr
#890:
Pull request #581
opened
by
rabbitstack
Potential NTLM hash leak via MS Photos rule
pr
#889:
Pull request #559
synchronize
by
rabbitstack
Process execution from remote memory section rule
pr
#888:
Pull request #580
opened
by
rabbitstack