Hasan
|
82bcfb29c3
|
Addition of Safemode flags
|
2021-06-15 17:07:02 +05:00 |
|
Jonhnathan
|
9152afda20
|
Update win_susp_bcdedit.yml
|
2020-10-15 18:28:42 -03:00 |
|
grikos
|
961e4eef4c
|
att&ck tags review: windows/process_creation part 6
|
2020-09-05 20:35:21 +03:00 |
|
Florian Roth
|
80f4b4ec71
|
fix: rules with duplicate tags
|
2020-07-27 11:44:47 +02:00 |
|
Florian Roth
|
58b68758b4
|
fix: wrong MITRE ATT&CK ids used in the beta version
|
2020-07-14 17:53:32 +02:00 |
|
Ivan Kirillov
|
0fbfcc6ba9
|
Initial round of subtechnique updates
|
2020-06-16 14:46:08 -06:00 |
|
ecco
|
fd386fe8eb
|
standardize rules with Image and CommandLine instead of NewProcessName and ProcessCommandLine
|
2020-05-15 12:35:32 -04:00 |
|
Florian Roth
|
d42e87edd7
|
fix: fixed casing and long rule titles
|
2020-01-30 17:26:09 +01:00 |
|
Thomas Patzke
|
0592cbb67a
|
Added UUIDs to rules
|
2019-11-12 23:12:27 +01:00 |
|
Nate Guagenti
|
2163208e9c
|
update correct process name
incorrect process name. accidentally had fsutil, should be bcdedit.
thanks to https://twitter.com/INIT_3 for pointing this out
|
2019-06-01 09:50:50 -04:00 |
|
mrblacyk
|
99595a7f89
|
Added missing tags and some minor improvements
|
2019-03-05 23:25:49 +01:00 |
|
Thomas Patzke
|
7602309138
|
Increased indentation to 4
* Converted (to generic sigma) rules
* Converter outputs by default with indentation 4
|
2019-03-02 00:14:20 +01:00 |
|
Thomas Patzke
|
c922f7d73f
|
Merge branch 'master' into project-1
|
2019-02-26 00:24:46 +01:00 |
|