18 Commits

Author	SHA1	Message	Date
Mike Wade	1ddba05eb2	Second round	2020-09-15 07:02:30 -06:00
aw350m3	b00047a4e8	att&ck tags review: application, apt, cloud, generic, proxy	2020-09-03 14:16:54 +00:00
Florian Roth	d9645af840	rule: added Emotet UA ... https://twitter.com/webbthewombat/status/1225827092132179968	2020-02-08 10:37:56 +01:00
Florian Roth	617ece1aa2	fix: fixed missing date fields in proxy rules	2020-01-30 15:20:52 +01:00
Thomas Patzke	dd8442590f	Fixed proxy rule field names	2019-12-07 00:11:33 +01:00
Thomas Patzke	0592cbb67a	Added UUIDs to rules	2019-11-12 23:12:27 +01:00
Thomas Patzke	ffdf312932	Added Ursnif user agents	2019-11-12 08:52:37 +01:00
Florian Roth	66a32549f1	rule: proxy malware ua - Zebrocy	2019-10-26 14:20:29 +02:00
Florian Roth	a7fa20546a	Rule: proxy user agents updated with MacControl user agent	2018-12-17 14:18:03 +01:00
Florian Roth	3c3b14a26b	rule: new malware UA	2018-10-10 15:27:58 +02:00
Florian Roth	6e0cc193c7	Rule: Pony / Fareit UA	2018-03-01 09:28:04 +01:00
Florian Roth	058d719e2b	Rule update: Proxy UA > Loki Bot	2018-02-12 10:08:32 +01:00
Florian Roth	1382edb5e3	Cosmetics	2018-02-09 10:13:39 +01:00
Florian Roth	34e0352a21	Rule: Proxy UAs - malware - Ghost419 ... https://securingtomorrow.mcafee.com/mcafee-labs/gold-dragon-widens-olympics-malware-attacks-gains-permanent-presence-on-victims-systems/	2018-02-03 14:47:04 +01:00
SherifEldeeb	112a0939d7	Change "reference" to "references" to match new schema	2018-01-28 02:12:19 +03:00
Thomas Patzke	986c9ff9b7	Added field names to first rules	2017-09-12 23:54:04 +02:00
Thomas Patzke	5c465129bd	Fixed rules ... * Replaced unspecified logsource attribute 'type' with 'category' * Usage of service 'auth' for linux logs	2017-09-11 00:35:52 +02:00
Florian Roth	4bff14acd1	User-Agent rules split up in separate files	2017-07-08 09:59:05 -06:00