yugoslavskiy 07ad11f3ae Update sysmon_possible_dns_rebinding.yml		2019-11-14 00:08:50 +03:00
..
builtin	Update win_suspicious_outbound_kerberos_connection.yml	2019-11-13 23:37:25 +03:00
malware	rules: AV rules updated to reflect 1.7.2 auf AV cheat sheet	2019-10-04 16:17:34 +02:00
other	Converted to use the new process_creation data source	2019-03-09 20:57:59 +03:00
powershell	ilyas ochkov contribution	2019-10-29 03:44:22 +03:00
process_creation	rule: the actual changes to hwp rule	2019-10-24 15:35:13 +02:00
sysmon	Update sysmon_possible_dns_rebinding.yml	2019-11-14 00:08:50 +03:00