4 Commits

Author	SHA1	Message	Date
Ensar Şamil	dec7568d4c	Rule simplification ... Two selection fields are reduced to one. HKCU and HKLM registry value changes are considered, thus wildcards are added. No change at details.	2018-09-28 10:58:50 +03:00
Thomas Patzke	87e39b8768	Fixed rules	2018-08-26 22:30:47 +02:00
yt0ng	df9f6688eb	Added Deskop Location, RunOnce and ATTCK ... Added C:\Users\tst01\Desktop\unprotected.vbs as seen by FIN7	2018-08-25 17:32:34 +02:00
Florian Roth	deea224421	Rule: New RUN Key Pointing to Suspicious Folder	2017-10-17 16:19:56 +02:00