14 Commits

Author	SHA1	Message	Date
ecco	2489b8534c	sysmon registry events fix	2020-03-09 12:02:04 -04:00
ecco	b9e4734087	fix sysmon registry rules with HKLM/HKU format as used since 02/2017 in sysmon	2020-03-04 12:47:42 -05:00
Florian Roth	d42e87edd7	fix: fixed casing and long rule titles	2020-01-30 17:26:09 +01:00
Florian Roth	e79e99c4aa	fix: fixed missing date fields in remaining files	2020-01-30 16:07:37 +01:00
Thomas Patzke	0592cbb67a	Added UUIDs to rules	2019-11-12 23:12:27 +01:00
Michael Wade	f70549ec54	First Pass	2019-06-13 23:15:38 -05:00
Thomas Patzke	3ef930b094	Escaped '\*' to '\\*' where required	2019-02-03 00:24:57 +01:00
Thomas Patzke	64fa3b162d	Tag fixes	2018-08-07 08:18:16 +02:00
Lurkkeli	6472be5e19	Update sysmon_uac_bypass_sdclt.yml	2018-08-07 08:08:53 +02:00
SherifEldeeb	48441962cc	Change All "str" references to be "list"to mach schema update	2018-01-28 02:24:16 +03:00
SherifEldeeb	112a0939d7	Change "reference" to "references" to match new schema	2018-01-28 02:12:19 +03:00
Florian Roth	3bfa9ed121	Bugfix: Minor fix cause Sysmon uses SID as Software key	2017-03-21 10:44:53 +01:00
Florian Roth	b1da8c5b32	Bugfix: Fixed UAC bypass rules	2017-03-21 10:42:22 +01:00
Florian Roth	b2c15c2cf7	Rule: UAC bypass via eventvwr, minor changes	2017-03-19 19:34:06 +01:00