8 Commits

Author	SHA1	Message	Date
Thomas Patzke	986c9ff9b7	Added field names to first rules	2017-09-12 23:54:04 +02:00
Florian Roth	f46e86fbb1	WMI persistence modified	2017-08-24 18:27:40 +02:00
Florian Roth	332f7d27da	Win WMI Persistence ... http://blog.trendmicro.com/trendlabs-security-intelligence/cryptocurrency-miner-uses-wmi-eternalblue-spread-filelessly/ https://twitter.com/mattifestation/status/899646620148539397	2017-08-22 10:02:54 +02:00
Florian Roth	d1f1bd59da	Changed level of PsExec events to 'low'	2017-06-17 08:50:16 +02:00
Thomas Patzke	4fcdcc3967	Added rule for PsExec	2017-06-12 23:57:06 +02:00
Florian Roth	59499f926e	Bugfix: Taskscheduler log source definition	2017-03-17 16:09:31 +01:00
Florian Roth	bcc250e1c7	Added missing description	2017-03-17 08:43:21 +01:00
Florian Roth	e46ecd2aff	Rule: Rare scheduled task installs	2017-03-17 08:41:27 +01:00