7 Commits

Author	SHA1	Message	Date
grikos	6092bfcec1	att&ck tags review: windows/process_creation part 9	2020-08-29 19:22:09 +03:00
Ivan Kirillov	0fbfcc6ba9	Initial round of subtechnique updates	2020-06-16 14:46:08 -06:00
Thomas Patzke	0592cbb67a	Added UUIDs to rules	2019-11-12 23:12:27 +01:00
Thomas Patzke	5f6a4225ec	Unified line terminators of rules to Unix	2019-11-12 23:05:36 +01:00
Karneades	766b8b8d18	Fix condition	2019-04-04 22:32:47 +02:00
Karneades	1915561351	Remove to loose wildcard from wmi spwns powershell rule	2019-04-04 22:12:28 +02:00
t0x1c-1	7e058e611c	WMI spawning PowerShell seen in various attacks	2019-04-03 16:56:45 +02:00