SigmaHQ/rules/windows/powershell
2018-03-06 23:19:11 +01:00
..
powershell_downgrade_attack.yml Change All "str" references to be "list"to mach schema update 2018-01-28 02:24:16 +03:00
powershell_exe_calling_ps.yml Change All "str" references to be "list"to mach schema update 2018-01-28 02:24:16 +03:00
powershell_malicious_commandlets.yml Change All "str" references to be "list"to mach schema update 2018-01-28 02:24:16 +03:00
powershell_malicious_keywords.yml Change All "str" references to be "list"to mach schema update 2018-01-28 02:24:16 +03:00
powershell_prompt_credentials.yml Simplified rule conditions with new condition constructs 2018-03-06 23:14:43 +01:00
powershell_psattack.yml Simplified rule conditions with new condition constructs 2018-03-06 23:14:43 +01:00
powershell_suspicious_download.yml Bugfix: PowerShell rules log source inconstency 2017-03-21 10:22:13 +01:00
powershell_suspicious_invocation_generic.yml Merged similar rules 2018-03-06 23:19:11 +01:00
powershell_suspicious_invocation_specific.yml Bugfix: PowerShell rules log source inconstency 2017-03-21 10:22:13 +01:00