Florian Roth bd0628240c Merge pull request #1639 from frack113/fix_win_possible_dc_shadow.yml ... fix invalid field EventID 5136		2021-07-07 10:11:51 +02:00
..
builtin	Merge pull request #1639 from frack113/fix_win_possible_dc_shadow.yml	2021-07-07 10:11:51 +02:00
create_remote_thread	Merging upstream updates	2021-07-01 12:18:30 +05:45
create_stream_hash	Merging upstream updates	2021-07-01 12:18:30 +05:45
deprecated	Merging upstream updates	2021-07-01 12:18:30 +05:45
dns_query	Merging upstream updates	2021-07-01 12:18:30 +05:45
driver_load	Merging upstream updates	2021-07-01 12:18:30 +05:45
file_delete	Added rule for deletion of DLLs by PrintNightmare	2021-07-01 16:33:55 +05:45
file_event	Update sysmon_susp_pfx_file_creation.yml	2021-07-04 10:38:53 +08:00
image_load	Update mordordatasets references	2021-07-06 16:35:20 +08:00
malware	Fixed Spell Error	2021-07-02 11:47:20 -05:00
network_connection	Update sysmon_remote_powershell_session_network.yml	2021-07-03 14:25:55 +08:00
other	Added and updated Defender's tamper related rules	2021-07-05 20:30:07 +05:45
pipe_created	Merging upstream updates	2021-07-01 12:18:30 +05:45
powershell	Updated ART reference links from .yaml to .md and sub-technique links.	2021-07-06 17:21:22 +08:00
process_access	fix 3 times the same name file	2021-07-02 11:01:07 +02:00
process_creation	fix invalid fields name	2021-07-07 09:05:00 +02:00
raw_access_thread	Merging upstream updates	2021-07-01 12:18:30 +05:45
registry_event	rule: PrinterNightmare Mimikatz update	2021-07-05 15:29:52 +02:00
sysmon	Merging upstream updates	2021-07-01 12:18:30 +05:45
wmi_event	Merging upstream updates	2021-07-01 12:18:30 +05:45