7 Commits

Author	SHA1	Message	Date
frack113	e45557316e	Fix selection with only 1 element	2021-08-14 09:54:27 +02:00
Thomas Patzke	90efe974b8	Fixes and improvements	2021-04-03 00:08:55 +02:00
Anton Kutepov	98cc025208	Renamed ProcessName field to Image for the process_creation category.	2021-02-25 01:57:26 +03:00
remotephone@gmail.com	7e002fcb5f	updating selections to make query more efficient and less prone to evasion	2020-10-13 22:17:26 -05:00
remotephone@gmail.com	7d49db3988	updating falsepositives documentation to remove line that's not applicable	2020-10-12 23:19:02 -05:00
remotephone@gmail.com	89c8a589a5	updating search syntax, splitting process name and cmdline and adding category	2020-10-12 22:49:19 -05:00
remotephone@gmail.com	476a3c04d9	Adding t1070_002	2020-10-12 00:01:10 -05:00