5 Commits

Author	SHA1	Message	Date
2d4d	cf5d7f11ad	remove .exe from lsass	2019-10-14 17:26:33 +02:00
Florian Roth	5583684efd	rule: extended suspicious procdump rule	2019-10-14 16:21:37 +02:00
Michael Wade	f70549ec54	First Pass	2019-06-13 23:15:38 -05:00
Thomas Patzke	7602309138	Increased indentation to 4 ... * Converted (to generic sigma) rules * Converter outputs by default with indentation 4	2019-03-02 00:14:20 +01:00
Thomas Patzke	96eb460944	Converted Sysmon/1 and Security/4688 to generic process creation rules	2019-01-16 23:36:31 +01:00