SigmaHQ/rules/windows
2019-02-05 18:56:24 -05:00
..
builtin add new rule 2019-02-05 18:56:24 -05:00
malware Escaped '\*' to '\\*' where required 2019-02-03 00:24:57 +01:00
other Rule: WMI Persistence - FPs 2019-02-05 14:35:23 +01:00
powershell rule: false positive reduction in PowerShell rules 2019-01-22 16:37:36 +01:00
sysmon Rule: FP in WMI persistence with SCCM 2019-02-05 15:57:54 +01:00