13 Commits

Author	SHA1	Message	Date
Anton Kutepov	3f45269296	Merge branch 'oscd' ... B B B B A	2021-03-02 22:58:41 +03:00
Florian Roth	63cc0d23c6	changes provided by FPT.EagleEye Team in ... https://github.com/Neo23x0/sigma/pull/1218/files	2021-01-09 10:38:20 +01:00
Jonhnathan	58f6fd4e4f	Update win_office_shell.yml	2020-10-15 18:13:10 -03:00
Yugoslavskiy Daniil	11e0f794d9	review windows/process_creation part 4	2020-09-02 02:34:34 +02:00
Ivan Kirillov	0fbfcc6ba9	Initial round of subtechnique updates	2020-06-16 14:46:08 -06:00
Thomas Patzke	0592cbb67a	Added UUIDs to rules	2019-11-12 23:12:27 +01:00
Florian Roth	1a3444d0ef	docs: comment on rule expression	2019-10-28 12:02:46 +01:00
Michael Wade	f70549ec54	First Pass	2019-06-13 23:15:38 -05:00
Florian Roth	1d3159bef0	Rule: Extended Office Shell rule	2019-04-15 08:13:35 +02:00
megan201296	c2a16591af	Remove invalid link ... Cybereason link was broken. Couldn't find anything with a super similar file path. The below link might be a valid replacement but went better safe than sorry and just removed it completely. https://www.cybereason.com/hubfs/Cybereason%20Labs%20Analysis%20Operation%20Cobalt%20Kitty-Part1.pdf	2019-03-07 14:22:29 -06:00
Thomas Patzke	7602309138	Increased indentation to 4 ... * Converted (to generic sigma) rules * Converter outputs by default with indentation 4	2019-03-02 00:14:20 +01:00
Thomas Patzke	c922f7d73f	Merge branch 'master' into project-1	2019-02-26 00:24:46 +01:00
Thomas Patzke	96eb460944	Converted Sysmon/1 and Security/4688 to generic process creation rules	2019-01-16 23:36:31 +01:00