8 Commits

Author	SHA1	Message	Date
Tareq AlKhatib	45458121c6	Updated to use the new process_creation logsource	2019-03-04 16:13:27 +03:00
David Spautz	f039f95f4d	Add tags to APT rules	2018-07-25 09:50:01 +02:00
Florian Roth	1ecfd83a6a	Missing separator	2018-03-05 11:30:01 +01:00
SherifEldeeb	48441962cc	Change All "str" references to be "list"to mach schema update	2018-01-28 02:24:16 +03:00
SherifEldeeb	112a0939d7	Change "reference" to "references" to match new schema	2018-01-28 02:12:19 +03:00
Thomas Patzke	5035c9c490	Converted Windows 4688-only rules into 4688 and Sysmon/1 collections	2017-11-01 22:12:14 +01:00
Florian Roth	d9e6913c03	APT 29 - tor / google update service	2017-04-01 10:30:36 +02:00
Florian Roth	43d907791c	Rule: APT29 Google Update service install	2017-03-31 19:31:13 +02:00