Jonhnathan 554adb8562 Update sysmon_susp_rdp.yml		2020-10-15 16:25:58 -03:00
..
builtin	Update win_vul_cve_2020_0688.yml	2020-10-15 15:56:36 -03:00
deprecated	fix: buggy rule	2020-05-23 18:32:02 +02:00
driver_load	Update sysmon_susp_driver_load.yml	2020-10-15 15:57:05 -03:00
file_event	Update sysmon_tsclient_filewrite_startup.yml	2020-10-15 16:02:52 -03:00
image_load	Update sysmon_svchost_dll_search_order_hijack.yml	2020-10-15 16:10:23 -03:00
malware	Update win_mal_ursnif.yml	2020-10-15 16:18:38 -03:00
network_connection	Update sysmon_susp_rdp.yml	2020-10-15 16:25:58 -03:00
other	Merge pull request #1007 from d4rk-d4nph3/master	2020-09-15 15:45:00 +02:00
powershell	added missing ATT&CK v6.3 IDs with comments and removed unnecessary "modified" attributes	2020-08-25 23:51:22 +00:00
process_access	fix typos, update tags	2020-09-13 15:46:45 +02:00
process_creation	Revert "Create win_susp_replace_lolbin.yml"	2020-10-15 14:57:18 -03:00
registry_event	added event type & changed technique	2020-10-02 09:22:14 +05:30
sysmon	Revert "att&ck tags review: windows/process_creation part 5"	2020-09-07 01:28:08 +04:00