| .. |
|
sysmon_accessing_winapi_in_powershell_credentials_dumping.yml
|
Update sysmon_accessing_winapi_in_powershell_credentials_dumping.yml
|
2020-10-13 22:32:55 +02:00 |
|
sysmon_ads_executable.yml
|
review windows/sysmon
|
2020-08-29 02:03:28 +02:00 |
|
sysmon_alternate_powershell_hosts_pipe.yml
|
review windows/sysmon
|
2020-08-29 02:03:28 +02:00 |
|
sysmon_apt_turla_namedpipes.yml
|
fixed various spelling errors all over rules and source code
|
2021-02-24 14:43:13 +00:00 |
|
sysmon_cactustorch.yml
|
Remove additional backlash
|
2020-11-20 02:04:28 -03:00 |
|
sysmon_cobaltstrike_process_injection.yml
|
review windows/sysmon
|
2020-08-29 02:03:28 +02:00 |
|
sysmon_createremotethread_loadlibrary.yml
|
review windows/sysmon
|
2020-08-29 02:03:28 +02:00 |
|
sysmon_cred_dump_tools_named_pipes.yml
|
review windows/sysmon
|
2020-08-29 02:03:28 +02:00 |
|
sysmon_mal_namedpipes.yml
|
fixed various spelling errors all over rules and source code
|
2021-02-24 14:43:13 +00:00 |
|
sysmon_password_dumper_lsass.yml
|
fix: adding only as a known false positive as it cannot be filtered out in a generic and public way
|
2021-04-01 14:37:15 +02:00 |
|
sysmon_possible_dns_rebinding.yml
|
review windows/sysmon
|
2020-08-29 02:03:28 +02:00 |
|
sysmon_psexec_pipes_artifacts.yml
|
Update sysmon_psexec_pipes_artifacts.yml
|
2020-10-07 14:43:25 +03:00 |
|
sysmon_raw_disk_access_using_illegitimate_tools.yml
|
Rule fixes
|
2020-02-20 23:00:16 +01:00 |
|
sysmon_regedit_export_to_ads.yml
|
Fixed field typo
|
2020-10-15 15:27:11 +02:00 |
|
sysmon_susp_powershell_rundll32.yml
|
Merge branch 'oscd'
|
2021-03-02 22:58:41 +03:00 |
|
sysmon_suspicious_remote_thread.yml
|
review windows/sysmon
|
2020-08-29 02:03:28 +02:00 |
|
sysmon_wmi_event_subscription.yml
|
review windows/sysmon
|
2020-08-29 02:03:28 +02:00 |
|
sysmon_wmi_susp_scripting.yml
|
Update detection Logic
|
2020-11-20 02:10:27 -03:00 |
