Thomas Patzke 5f1e933b93 Merge pull request #588 from timbMSFT/timb ... Sigma queries - defense evasion by tampering with svchost; recently released GALLIUM activity group IOCs		2020-01-20 10:06:06 +01:00
..
builtin	rule: added a reference	2020-01-15 21:27:40 +01:00
malware	Add scriptlets	2019-11-14 22:26:22 +01:00
other	Added UUIDs to rules	2019-11-12 23:12:27 +01:00
powershell	Add the ability to detect PowerUp - Invoke-AllChecks	2019-12-23 11:50:57 +01:00
process_creation	Merge pull request #585 from Neo23x0/devel	2019-12-30 15:08:43 +01:00
sysmon	Sigma queries for	2020-01-02 14:47:55 +00:00