7 Commits

Author	SHA1	Message	Date
Jonhnathan	9d8116c486	Update win_susp_taskmgr_parent.yml	2020-10-15 19:50:04 -03:00
Thomas Patzke	0592cbb67a	Added UUIDs to rules	2019-11-12 23:12:27 +01:00
ecco	5a15687c6c	fix rule: task manager as parent: task manager can be run with higher privileges (show processes from all users --> UAC) and its parent is still the old taskmgr	2019-09-27 11:06:21 -04:00
Florian Roth	26036e0d35	fix: fixed image in taskmgr rule	2019-06-21 17:15:53 +02:00
Yugoslavskiy Daniil	05cc7e455d	atc review	2019-03-06 05:25:12 +01:00
Thomas Patzke	7602309138	Increased indentation to 4 ... * Converted (to generic sigma) rules * Converter outputs by default with indentation 4	2019-03-02 00:14:20 +01:00
Thomas Patzke	96eb460944	Converted Sysmon/1 and Security/4688 to generic process creation rules	2019-01-16 23:36:31 +01:00