Thomas Patzke
|
373424f145
|
Rule fixes
Made tests pass the new CI tests. Added further allowed lower case words
in rule test.
|
2020-02-20 23:00:16 +01:00 |
|
Thomas Patzke
|
8d6a507ec4
|
OSCD QA wave 1
* Checked all rules against Mordor and EVTX samples datasets
* Added field names
* Some severity adjustments
* Fixes
|
2020-01-11 00:11:27 +01:00 |
|
Thomas Patzke
|
924e1feb54
|
UUIDs + moved unsupported logic
* Added UUIDs to all contributed rules
* Moved unsupported logic directory out of rules/ because this breaks CI
testing.
|
2019-12-19 23:56:36 +01:00 |
|
yugoslavskiy
|
fcde35d6ab
|
Update sysmon_regsvr32_network_activity.yml
|
2019-11-10 22:51:53 +03:00 |
|
Yugoslavskiy Daniil
|
3376cf4dd8
|
fix some typos and remove redundand references
|
2019-10-29 01:40:06 +03:00 |
|
Mikhail Larin
|
334301c185
|
OSCD event rules from Jet CSIRT team
|
2019-10-25 17:57:56 +03:00 |
|