5 Commits

Author	SHA1	Message	Date
ecco	4c54e8322a	sysmon eventid 3: filter on outgoing connections (initiated: true) to avoid false positives	2019-09-25 11:11:22 -04:00
Christophe Tafani-Dereeper	5bc10a4855	Include Github raw URLs in suspicious downloads detection rule	2019-07-05 09:01:35 +00:00
mrblacyk	99595a7f89	Added missing tags and some minor improvements	2019-03-05 23:25:49 +01:00
Thomas Patzke	3ef930b094	Escaped '\*' to '\\*' where required	2019-02-03 00:24:57 +01:00
Florian Roth	d83f124f5f	Rule: Suspicious communication endpoints	2018-08-30 10:12:12 +02:00