| .. |
|
7-zip-prep-for-exfiltration.md
|
New AHQ
|
2021-03-05 10:32:46 -08:00 |
|
Anomaly of MailItemAccess by GraphAPI [Nobelium].md
|
title updates, see-also, typos
|
2021-03-09 17:56:58 -05:00 |
|
Data copied to other location than C drive.txt
|
Rename Data copied to other location than C:.txt to Data copied to other location than C drive.txt
|
2020-08-05 17:33:07 -04:00 |
|
Files copied to USB drives.md
|
Update Files copied to USB drives.md
|
2021-03-23 16:27:23 -07:00 |
|
MailItemsAccessed Throttling [Nobelium].md
|
title updates, see-also, typos
|
2021-03-09 17:56:58 -05:00 |
|
Map external devices.txt
|
Update github queries to use the new advanced hunting device schema
|
2020-01-05 15:46:07 +02:00 |
|
OAuth Apps accessing user mail via GraphAPI [Nobelium].md
|
title updates, see-also, typos
|
2021-03-09 17:56:58 -05:00 |
|
OAuth Apps reading mail both via GraphAPI and directly [Nobelium].md
|
title updates, see-also, typos
|
2021-03-09 17:56:58 -05:00 |
|
OAuth Apps reading mail via GraphAPI anomaly [Nobelium].md
|
title updates, see-also, typos
|
2021-03-09 17:56:58 -05:00 |
|
Password Protected Archive Creation.md
|
Update Password Protected Archive Creation.md
|
2020-09-01 15:02:34 -04:00 |
|
Possible File Copy to USB Drive.md
|
Fixed a typo in query (cosmetic only)
|
2021-02-02 09:29:03 -05:00 |
|
detect-archive-exfiltration-to-competitor.md
|
Initial Commit
|
2020-07-29 15:43:28 -04:00 |
|
detect-exfiltration-after-termination.md
|
Update detect-exfiltration-after-termination.md
|
2022-01-16 17:04:25 +02:00 |
|
detect-steganography-exfiltration.md
|
Initial Commit
|
2020-07-29 15:43:28 -04:00 |
|
exchange-powershell-snapin-loaded.md
|
New AHQ
|
2021-03-05 10:32:46 -08:00 |
