3 Commits

Author	SHA1	Message	Date
Florian Roth	080532d20c	logsource change ... I've swapped the lines in the logsource section to make it clearer that the category "process_creation" covers all sources that generate process creation logs on the windows platform.	2020-02-07 15:47:27 +01:00
Tim Burrell (MSTIC)	f70f847524	additional gallium ttp ... sha1 process creation only makes sense for sysmon	2020-02-07 14:08:40 +00:00
Florian Roth	03ecb3b8dc	refactor: moved rues from 'apt' folder in respective folders	2020-02-01 17:59:26 +01:00