10 Commits

Author	SHA1	Message	Date
Ivan Kirillov	0fbfcc6ba9	Initial round of subtechnique updates	2020-06-16 14:46:08 -06:00
teddy-ROxPin	1a3731f7ae	Typo fix for powershell_suspicious_invocation_generic.yml ... ' - windowstyle hidden ' changed to ' -windowstyle hidden '	2020-03-29 04:16:15 -06:00
Florian Roth	e79e99c4aa	fix: fixed missing date fields in remaining files	2020-01-30 16:07:37 +01:00
Thomas Patzke	0592cbb67a	Added UUIDs to rules	2019-11-12 23:12:27 +01:00
ntim	c99dc9f643	Tagged windows powershell, other and malware rules.	2018-07-24 10:56:41 +02:00
Thomas Patzke	8041f77abd	Merged similar rules	2018-03-06 23:19:11 +01:00
Thomas Patzke	84645f4e59	Simplified rule conditions with new condition constructs	2018-03-06 23:14:43 +01:00
Florian Roth	055992eb05	Bugfix: PowerShell rules log source inconstency	2017-03-21 10:22:13 +01:00
Florian Roth	a0047f7c67	Sysmon as 'service' of product 'windows'	2017-03-13 09:23:08 +01:00
Florian Roth	de689c32b5	Suspicious PowerShell Invocation	2017-03-12 17:06:53 +01:00