7 Commits

Author	SHA1	Message	Date
Florian Roth	0b541b2689	Suspicious Windows Process Creations Update	2017-05-12 21:55:30 +02:00
Florian Roth	dc4ae35be1	Schtasks frequency - minute	2017-04-28 17:03:35 +02:00
Florian Roth	f91f813b3f	Improved certutil.exe rules	2017-03-27 22:30:26 +02:00
Florian Roth	078eaa1180	Updated Windows suspicious activity	2017-03-27 17:27:04 +02:00
Florian Roth	125bf4f3f2	Rule adjustment ... Added wilcards cause the field can contain a full path	2017-03-26 23:41:38 +02:00
Florian Roth	53cc80c8f4	Windows Supicious Process Creation ... - Bugfix in selection name - New keyword expressions	2017-03-26 23:25:47 +02:00
Florian Roth	c1a6a542db	Rule: Windows 4688 process creation rule	2017-03-26 01:26:34 +01:00