Florian Roth b0c2d7b75a fix: tags for WMI / execution / persistence		2021-09-01 16:34:50 +02:00
..
sysmon_wmi_event_subscription.yml	- Remove 'service: sysmon' since defining the categories made the rules generic	2020-10-02 09:37:52 +02:00
sysmon_wmi_susp_encoded_scripts.yml	fix: tags for WMI / execution / persistence	2021-09-01 16:34:50 +02:00
sysmon_wmi_susp_scripting.yml	rule: extended WMI suspicious scripts rule	2021-09-01 13:57:48 +02:00