13 Commits

Author	SHA1	Message	Date
Yugoslavskiy Daniil	42c4079ed8	att&ck tags review: windows/builtin, windows/driver_load, windows/file_event, windows/image_load, windows/other	2020-08-25 01:09:17 +02:00
Ivan Kirillov	0fbfcc6ba9	Initial round of subtechnique updates	2020-06-16 14:46:08 -06:00
Thomas Patzke	0592cbb67a	Added UUIDs to rules	2019-11-12 23:12:27 +01:00
Florian Roth	2c57b443e4	docs: modification date in rule	2019-07-17 09:21:35 +02:00
Florian Roth	de74eb4eb7	Merge pull request #400 from yugoslavskiy/win_susp_dhcp_config_failed_fix ... Win susp dhcp config failed fix	2019-07-17 09:20:25 +02:00
yugoslavskiy	e8b9a6500e	author string modified	2019-07-17 07:02:59 +03:00
yugoslavskiy	a295334355	win_susp_dhcp_config_failed fixed	2019-07-17 07:01:58 +03:00
Nate Guagenti	e2050404bc	prevent EventID collision for dhcp ... This prevents EventID collision for this rule with other sources/logs that share the same EventIDs. specifically a lot with Microsoft-Windows-Security-SPP	2019-07-16 15:30:52 -04:00
mrblacyk	99595a7f89	Added missing tags and some minor improvements	2019-03-05 23:25:49 +01:00
Florian Roth	dfd4ce878f	Rule: limiting rule to DHCP log	2019-02-05 14:35:23 +01:00
Thomas Patzke	b1bfa64231	Removed redundant 'EventLog' conditions	2018-03-26 00:36:40 +02:00
SherifEldeeb	112a0939d7	Change "reference" to "references" to match new schema	2018-01-28 02:12:19 +03:00
dimi	0b8c82b75b	1) Add Windows DHCP Server Callout DLL rules: Sysmon, failed loading and successfull loading ... 2) correct typo in dns server rule	2017-05-15 20:58:31 +02:00