mirror of
https://github.com/valitydev/SigmaHQ.git
synced 2024-11-07 01:45:21 +00:00
82f23c5f63
add 13 new rules: - rules/linux/auditd/lnx_auditd_masquerading_crond.yml - rules/linux/auditd/lnx_auditd_user_discovery.yml - rules/linux/auditd/lnx_data_compressed.yml - rules/linux/auditd/lnx_network_sniffing.yml - rules/windows/powershell/powershell_data_compressed.yml - rules/windows/powershell/powershell_winlogon_helper_dll.yml - rules/windows/process_creation/win_change_default_file_association.yml - rules/windows/process_creation/win_data_compressed_with_rar.yml - rules/windows/process_creation/win_local_system_owner_account_discovery.yml - rules/windows/process_creation/win_network_sniffing.yml - rules/windows/process_creation/win_query_registry.yml - rules/windows/process_creation/win_service_execution.yml - rules/windows/process_creation/win_xsl_script_processing.yml modify 1 rule: - rules/windows/process_creation/win_possible_applocker_bypass.yml |
||
|---|---|---|
| .. | ||
| application | ||
| apt | ||
| compliance | ||
| linux | ||
| network | ||
| proxy | ||
| web | ||
| windows | ||