SigmaHQ/rules/windows
2019-10-30 15:16:33 +01:00
..
builtin rule: mimikatz use extended 2019-10-11 18:50:33 +02:00
malware rules: AV rules updated to reflect 1.7.2 auf AV cheat sheet 2019-10-04 16:17:34 +02:00
other fix: bound keywords to field in WMI persistence rule 2019-10-29 19:22:41 +01:00
powershell Merge pull request #508 from Karneades/fixRule3 2019-10-29 22:34:08 +01:00
process_creation rule: DTRACK process creation 2019-10-30 15:16:33 +01:00
sysmon rule: svchost dll search order hijack 2019-10-28 12:03:03 +01:00