10 Commits

Author	SHA1	Message	Date
Thomas Patzke	0592cbb67a	Added UUIDs to rules	2019-11-12 23:12:27 +01:00
Michael Wade	f70549ec54	First Pass	2019-06-13 23:15:38 -05:00
Karneades	865d971704	Remove backslashes in CommandLine for sticky key rule ... Example command line is exactly "cmd.exe sethc.exe 211". => the detection with *\cmd.exe... would not match.	2019-04-03 16:16:18 +02:00
Tareq AlKhatib	075df83118	Converted to use the new process_creation data source	2019-03-09 20:57:59 +03:00
Thomas Patzke	30d255ab6f	Fixed tag	2018-07-24 07:58:25 +02:00
Lurkkeli	1898157df5	ATT&CK tagging ... Added tag for technique t1015	2018-07-23 23:57:15 +02:00
Florian Roth	af8be8f064	Several rule updates	2018-03-19 16:36:15 +01:00
Karneades	49c12f1df8	Add missing binaries	2018-03-16 10:52:43 +01:00
Florian Roth	a257b7d9d7	Rule: Stickykey improved	2018-03-16 09:10:07 +01:00
Florian Roth	f5494c6f5f	Rule: StickyKey-ike backdoor usage	2018-03-15 19:53:34 +01:00