SigmaHQ/rules/windows/raw_access_thread
2020-10-02 09:37:52 +02:00
..
sysmon_raw_disk_access_using_illegitimate_tools.yml - Remove 'service: sysmon' since defining the categories made the rules generic 2020-10-02 09:37:52 +02:00