mirror of
https://github.com/valitydev/SigmaHQ.git
synced 2024-11-07 09:48:58 +00:00
8b3b312c4e
This change removes dns events from the network connection category. The one change is that sysmon_regsvr32_network_activity.yml needs to test the network connection category separately from the DNS event id. |
||
---|---|---|
.. | ||
application | ||
apt | ||
cloud | ||
compliance | ||
generic | ||
linux | ||
network | ||
proxy | ||
web | ||
windows |