leegengyu
|
7557732ca2
|
Updated ART reference links from .yaml to .md and sub-technique links.
|
2021-07-06 17:21:22 +08:00 |
|
e6e6e
|
98c412044a
|
att&ck tags review: windows/process_creation part 5
added missing ATT&CK v6.3 IDs with comments and removed unnecessary "modified" attributes
|
2020-09-07 02:00:41 +04:00 |
|
e6e6e
|
7ae76b8d99
|
Revert "att&ck tags review: windows/process_creation part 5"
This reverts commit e94c47e74e .
|
2020-09-07 01:28:08 +04:00 |
|
e6e6e
|
e94c47e74e
|
att&ck tags review: windows/process_creation part 5
added missing ATT&CK v6.3 IDs with comments and removed unnecessary "modified" attributes
|
2020-09-07 01:19:41 +04:00 |
|
Ivan Kirillov
|
0fbfcc6ba9
|
Initial round of subtechnique updates
|
2020-06-16 14:46:08 -06:00 |
|
Florian Roth
|
c8e29da7ec
|
fix: simplified rule with RE
|
2019-12-03 11:24:06 +01:00 |
|
Thomas Patzke
|
0592cbb67a
|
Added UUIDs to rules
|
2019-11-12 23:12:27 +01:00 |
|
Thomas Patzke
|
5f6a4225ec
|
Unified line terminators of rules to Unix
|
2019-11-12 23:05:36 +01:00 |
|
Thomas Patzke
|
8ae824f09f
|
Improved rules
Reduced false positives
|
2019-11-08 23:56:14 +01:00 |
|
yugoslavskiy
|
3b34ed6150
|
add modifiers
|
2019-11-08 01:34:30 +03:00 |
|
yugoslavskiy
|
cc7aebe9b6
|
Update win_service_execution.yml
|
2019-11-05 04:42:53 +03:00 |
|
yugoslavskiy
|
479aafe466
|
Update win_service_execution.yml
|
2019-11-05 04:26:19 +03:00 |
|
yugoslavskiy
|
27e63abcc4
|
Update and rename win_custom_service_execution.yml to win_service_execution.yml
|
2019-11-05 02:57:15 +03:00 |
|
yugoslavskiy
|
66bfbd0af9
|
Update and rename win_service_execution.yml to win_custom_service_execution.yml
|
2019-11-05 02:55:41 +03:00 |
|
zinint
|
c243c4e210
|
T1035
|
2019-10-29 20:58:52 +03:00 |
|