7 Commits

Author	SHA1	Message	Date
ecco	f807dae69a	fix false positive on taskkill.exe not related to service stop at all	2020-02-24 03:03:46 -05:00
Thomas Patzke	373424f145	Rule fixes ... Made tests pass the new CI tests. Added further allowed lower case words in rule test.	2020-02-20 23:00:16 +01:00
Thomas Patzke	593abb1cce	OSCD QA wave 3	2020-02-02 12:41:12 +01:00
Thomas Patzke	8d6a507ec4	OSCD QA wave 1 ... * Checked all rules against Mordor and EVTX samples datasets * Added field names * Some severity adjustments * Fixes	2020-01-11 00:11:27 +01:00
Thomas Patzke	924e1feb54	UUIDs + moved unsupported logic ... * Added UUIDs to all contributed rules * Moved unsupported logic directory out of rules/ because this breaks CI testing.	2019-12-19 23:56:36 +01:00
yugoslavskiy	7d3c9e129d	Update win_service_stop.yml	2019-11-08 02:40:37 +03:00
mrblacyk	262514c782	Windows Service stop rule (T1489)	2019-10-23 11:22:09 -07:00