Florian Roth 22465037ac Update win_susp_mpcmdrun_download.yml		2020-09-04 16:50:57 +02:00
..
builtin	fix: FPs with McAfee and CyberReason	2020-09-02 12:30:34 +02:00
deprecated	fix: buggy rule	2020-05-23 18:32:02 +02:00
driver_load	fix: bugfix and cosmetics	2020-06-24 18:10:58 +02:00
file_event	add wmi persistence script event consumer false positive	2020-07-20 12:27:16 +08:00
image_load	Updated tags to include sub-techniques	2020-07-18 02:50:57 +01:00
malware	Further subtechnique updates	2020-06-17 11:31:40 -06:00
network_connection	Updated tags to include sub-techniques	2020-07-18 02:50:57 +01:00
other	Updated to include extra registry key	2020-07-18 02:37:11 +01:00
powershell	Merge branch 'master' of github.com:Neo23x0/sigma	2020-07-15 10:27:33 -04:00
process_access	Updated invoke_phantom with sub-technique mapping	2020-07-18 02:32:42 +01:00
process_creation	Update win_susp_mpcmdrun_download.yml	2020-09-04 16:50:57 +02:00
registry_event	remove false positives in Windows being too broad and add specific keys looked at + add keys from wow64	2020-08-18 05:28:37 -04:00
sysmon	Merge pull request #928 from duzvik/master	2020-08-12 17:15:27 +02:00