7 Commits

Author	SHA1	Message	Date
Jonhnathan	ce8d649275	Update win_susp_cli_escape.yml	2020-10-15 18:30:46 -03:00
neu5ron	4c94906d53	rule should be wildcard AND had a prepended ^ in one of the CommandLine conditions that would have caused to not trigger	2020-03-14 15:00:42 -04:00
Florian Roth	e79e99c4aa	fix: fixed missing date fields in remaining files	2020-01-30 16:07:37 +01:00
Thomas Patzke	0592cbb67a	Added UUIDs to rules	2019-11-12 23:12:27 +01:00
ecco	c2868f6e03	remove TAB from cli escape as it's currently unsupported in sigmac	2019-09-23 04:46:10 -04:00
Thomas Patzke	7602309138	Increased indentation to 4 ... * Converted (to generic sigma) rules * Converter outputs by default with indentation 4	2019-03-02 00:14:20 +01:00
Thomas Patzke	96eb460944	Converted Sysmon/1 and Security/4688 to generic process creation rules	2019-01-16 23:36:31 +01:00