7 Commits

Author	SHA1	Message	Date
frack113	0fb6c35b1f	Cleanup PS rules	2021-08-21 09:58:58 +02:00
wagga40	11df697cdc	Updated rules with modifiers instead of '*' and remove trailing '\\'	2021-06-27 14:51:29 +02:00
frack113	b23423beba	convert to TargetImage|endswith	2021-06-21 20:51:26 +02:00
Jonhnathan	e218c32a4c	Update Threat Hunter Playbook Reference	2021-05-22 01:00:39 -03:00
Steven	850a002840	Merge branch 'master' of https://github.com/SigmaHQ/sigma	2021-04-15 01:25:48 +02:00
Steven	0c9a82af89	- Remove 'service: sysmon' since defining the categories made the rules generic	2020-10-02 09:37:52 +02:00
Steven	8b74abe0bc	- Created new categories for sysmon events ... - Replaced the explicit EventIDs with the reference to the category - Moved the rules to the corresponding directories	2020-09-30 20:44:14 +02:00