7 Commits

Author	SHA1	Message	Date
aw350m3	399f378269	att&ck tags review: windows/powershell, windows/process_access, windows/network_connection	2020-08-24 23:31:26 +00:00
aw350m3	ba2e891433	windows/powershell folder reviewed. Old ID’s marked with comment “an old one”. These ID’s have to be removed in future.	2020-08-24 00:01:50 +00:00
Ryan Plas	25d978d9bd	Update powershell_shellcode_b64.yml logsource to use the correct Sigma schema values	2020-07-11 22:17:06 -04:00
Ivan Kirillov	0fbfcc6ba9	Initial round of subtechnique updates	2020-06-16 14:46:08 -06:00
Thomas Patzke	0592cbb67a	Added UUIDs to rules	2019-11-12 23:12:27 +01:00
mrblacyk	99595a7f89	Added missing tags and some minor improvements	2019-03-05 23:25:49 +01:00
Florian Roth	fd06cde641	Rule: Detect base64 encoded PowerShell shellcode ... https://twitter.com/cyb3rops/status/1063072865992523776	2018-11-17 09:10:09 +01:00