SigmaHQ/rules/windows
Brad Kish d385cbfa69 Fix quoting for AD Object WriteDAC Access
The AccessMask field needs to be quoted so that it is compared correctly.
2020-06-22 15:31:03 -04:00
..
builtin Fix quoting for AD Object WriteDAC Access 2020-06-22 15:31:03 -04:00
deprecated fix: buggy rule 2020-05-23 18:32:02 +02:00
malware Further subtechnique updates 2020-06-17 11:31:40 -06:00
other Initial round of subtechnique updates 2020-06-16 14:46:08 -06:00
powershell Initial round of subtechnique updates 2020-06-16 14:46:08 -06:00
process_creation Update for new method 2020-06-22 01:06:34 +03:00
sysmon Merge branch 'master' into rule-devel 2020-06-19 09:24:26 +02:00