Steven 7b679cc1f7 - Modified rules to use categories instead of hardcoded event IDs ... - Added file_delete category (Sysmon Event ID 23) to the generic translation file		2021-04-15 01:40:31 +02:00
..
.keep	Keep empty sysmon directory so tests will still run	2020-10-02 11:25:30 +02:00
sysmon_accessing_winapi_in_powershell_credentials_dumping.yml	Update sysmon_accessing_winapi_in_powershell_credentials_dumping.yml	2020-10-13 22:32:55 +02:00
sysmon_dcom_iertutil_dll_hijack.yml	update - GitHub Action / Test Sigma	2020-10-12 21:58:02 -04:00
sysmon_wmiprvse_wbemcomn_dll_hijack.yml	Fixes&improvements	2021-04-08 01:06:40 +02:00