SigmaHQ/rules/windows/powershell
2019-11-12 23:05:36 +01:00
..
powershell_data_compressed.yml Unified line terminators of rules to Unix 2019-11-12 23:05:36 +01:00
powershell_downgrade_attack.yml Tagged windows powershell, other and malware rules. 2018-07-24 10:56:41 +02:00
powershell_exe_calling_ps.yml Tagged windows powershell, other and malware rules. 2018-07-24 10:56:41 +02:00
powershell_malicious_commandlets.yml fix: bound keywords to field in multiple PS rules 2019-10-29 19:53:18 +01:00
powershell_malicious_keywords.yml fix: bound keywords to field in multiple PS rules 2019-10-29 19:53:18 +01:00
powershell_ntfs_ads_access.yml Merge branch 'master' of https://github.com/SherifEldeeb/sigma into SherifEldeeb-master 2018-12-04 23:35:23 +01:00
powershell_prompt_credentials.yml fix: bound keywords to field in PS cred prompt rule 2019-10-29 19:43:04 +01:00
powershell_psattack.yml fixed typos 2019-06-29 15:35:59 +03:00
powershell_shellcode_b64.yml Added missing tags and some minor improvements 2019-03-05 23:25:49 +01:00
powershell_suspicious_download.yml fix: bound keywords to field in multiple PS rules 2019-10-29 19:53:18 +01:00
powershell_suspicious_invocation_generic.yml Tagged windows powershell, other and malware rules. 2018-07-24 10:56:41 +02:00
powershell_suspicious_invocation_specific.yml fix: bound keywords to field in multiple PS rules 2019-10-29 19:53:18 +01:00
powershell_suspicious_keywords.yml fix: change keyword and bound it to a field 2019-10-29 19:59:43 +01:00
powershell_winlogon_helper_dll.yml Unified line terminators of rules to Unix 2019-11-12 23:05:36 +01:00