SigmaHQ/rules/windows/create_remote_thread
2021-04-15 01:25:48 +02:00
..
sysmon_cactustorch.yml Merge branch 'master' of https://github.com/SigmaHQ/sigma 2021-04-15 01:25:48 +02:00
sysmon_cobaltstrike_process_injection.yml - Remove 'service: sysmon' since defining the categories made the rules generic 2020-10-02 09:37:52 +02:00
sysmon_createremotethread_loadlibrary.yml - Remove 'service: sysmon' since defining the categories made the rules generic 2020-10-02 09:37:52 +02:00
sysmon_password_dumper_lsass.yml Merge branch 'master' of https://github.com/SigmaHQ/sigma 2021-04-15 01:25:48 +02:00
sysmon_susp_powershell_rundll32.yml Merge branch 'master' of https://github.com/SigmaHQ/sigma 2021-04-15 01:25:48 +02:00
sysmon_suspicious_remote_thread.yml - Remove 'service: sysmon' since defining the categories made the rules generic 2020-10-02 09:37:52 +02:00