SigmaHQ/rules/windows
2019-02-21 13:26:48 +01:00
..
builtin Fixing yara condition 2019-02-20 10:57:24 -05:00
malware Escaped '\*' to '\\*' where required 2019-02-03 00:24:57 +01:00
other Rule: WMI Persistence - FPs 2019-02-05 14:35:23 +01:00
powershell Rule: Suspicious PowerShell keywords 2019-02-11 13:02:38 +01:00
sysmon Rule: extended exec location rule to support 4688 events 2019-02-21 13:26:48 +01:00