SigmaHQ/rules/windows/powershell
2020-02-11 16:26:17 +01:00
..
powershell_data_compressed.yml Data Compressed duplciate titles 2019-12-09 16:24:10 +00:00
powershell_downgrade_attack.yml fix: fixed missing date fields in remaining files 2020-01-30 16:07:37 +01:00
powershell_exe_calling_ps.yml fix: fixed casing and long rule titles 2020-01-30 17:26:09 +01:00
powershell_malicious_commandlets.yml fix: fixed missing date fields in remaining files 2020-01-30 16:07:37 +01:00
powershell_malicious_keywords.yml fix: fixed missing date fields in remaining files 2020-01-30 16:07:37 +01:00
powershell_nishang_malicious_commandlets.yml rule: remove keywords in powershell rule prone to FPs 2020-02-11 16:26:17 +01:00
powershell_ntfs_ads_access.yml fix: fixed missing date fields in remaining files 2020-01-30 16:07:37 +01:00
powershell_prompt_credentials.yml fix: fixed missing date fields in remaining files 2020-01-30 16:07:37 +01:00
powershell_psattack.yml fix: fixed missing date fields in remaining files 2020-01-30 16:07:37 +01:00
powershell_shellcode_b64.yml Added UUIDs to rules 2019-11-12 23:12:27 +01:00
powershell_suspicious_download.yml fix: fixed missing date fields in remaining files 2020-01-30 16:07:37 +01:00
powershell_suspicious_invocation_generic.yml fix: fixed missing date fields in remaining files 2020-01-30 16:07:37 +01:00
powershell_suspicious_invocation_specific.yml fix: fixed missing date fields in remaining files 2020-01-30 16:07:37 +01:00
powershell_suspicious_keywords.yml Added UUIDs to rules 2019-11-12 23:12:27 +01:00
powershell_winlogon_helper_dll.yml Added UUIDs to rules 2019-11-12 23:12:27 +01:00