13 Commits

Author	SHA1	Message	Date
Anton Kutepov	d7ef865bb9	Merge remote-tracking branch 'upstream/master' and fix conflicts	2021-03-07 23:36:13 +03:00
Florian Roth	bdc35aa3ec	Update win_webshell_spawn.yml	2021-03-05 11:34:17 +01:00
Anton Kutepov	3f45269296	Merge branch 'oscd' ... B B B B A	2021-03-02 22:58:41 +03:00
Florian Roth	63cc0d23c6	changes provided by FPT.EagleEye Team in ... https://github.com/Neo23x0/sigma/pull/1218/files	2021-01-09 10:38:20 +01:00
Jonhnathan	630e92f3c2	Update win_webshell_spawn.yml	2020-10-15 19:59:59 -03:00
grikos	6092bfcec1	att&ck tags review: windows/process_creation part 9	2020-08-29 19:22:09 +03:00
Ivan Kirillov	0fbfcc6ba9	Initial round of subtechnique updates	2020-06-16 14:46:08 -06:00
Florian Roth	28d8b87a0f	rule: extended web shell spawn rule	2020-03-25 14:02:39 +01:00
Florian Roth	6bbb166f3d	rule: extended webshell rule with tomcat.exe	2020-03-04 14:25:57 +01:00
Florian Roth	e79e99c4aa	fix: fixed missing date fields in remaining files	2020-01-30 16:07:37 +01:00
Thomas Patzke	0592cbb67a	Added UUIDs to rules	2019-11-12 23:12:27 +01:00
Thomas Patzke	7602309138	Increased indentation to 4 ... * Converted (to generic sigma) rules * Converter outputs by default with indentation 4	2019-03-02 00:14:20 +01:00
Thomas Patzke	96eb460944	Converted Sysmon/1 and Security/4688 to generic process creation rules	2019-01-16 23:36:31 +01:00