Florian Roth
|
affc929c3b
|
LiquidSnake named pipe
|
2021-09-01 13:54:47 +02:00 |
|
Florian Roth
|
ecb133f97d
|
docs: extended authors of malicious pipe rule
|
2021-05-04 09:28:17 +02:00 |
|
Florian Roth
|
c6aeee958e
|
rule: more named pipes by @blueteam0ps
|
2021-05-04 09:27:11 +02:00 |
|
Florian Roth
|
f2fa8dd956
|
rules: CobaltStrike named pipes
|
2021-04-23 17:16:09 +02:00 |
|
Steven
|
850a002840
|
Merge branch 'master' of https://github.com/SigmaHQ/sigma
|
2021-04-15 01:25:48 +02:00 |
|
Steven
|
0c9a82af89
|
- Remove 'service: sysmon' since defining the categories made the rules generic
|
2020-10-02 09:37:52 +02:00 |
|
Steven
|
8b74abe0bc
|
- Created new categories for sysmon events
- Replaced the explicit EventIDs with the reference to the category
- Moved the rules to the corresponding directories
|
2020-09-30 20:44:14 +02:00 |
|