| .. |
|
LP_0001_windows_audit_process_creation.md
|
kb rebuilded with new templates
|
2018-12-21 21:15:34 +01:00 |
|
LP_0002_windows_audit_process_creation_with_commandline.md
|
kb rebuilded with new templates
|
2018-12-21 21:15:34 +01:00 |
|
LP_0003_windows_sysmon_process_creation.md
|
kb rebuilded with new templates
|
2018-12-21 21:15:34 +01:00 |
|
LP_0004_windows_audit_logon.md
|
kb rebuilded with new templates
|
2018-12-21 21:15:34 +01:00 |
|
LP_0005_windows_sysmon_network_connection.md
|
dataneeded, lp - sysmon
|
2019-02-01 14:38:47 +01:00 |
|
LP_0006_windows_sysmon_image_loaded.md
|
dataneeded, lp - sysmon
|
2019-02-01 14:38:47 +01:00 |
|
LP_0007_windows_sysmon_ProcessAccess.md
|
dataneeded, lp - sysmon
|
2019-02-01 14:38:47 +01:00 |
|
LP_0008_windows_sysmon_FileCreate.md
|
dataneeded, lp - sysmon
|
2019-02-01 14:38:47 +01:00 |
|
LP_0009_windows_sysmon_PipeEvent.md
|
ra rp initial
|
2019-02-06 23:07:31 +01:00 |
|
LP_0010_windows_sysmon_WmiEvent.md
|
ra rp initial
|
2019-02-06 23:07:31 +01:00 |
|
LP_0025_windows_audit_directory_service_changes.md
|
code de-hardcoding, powershell events groundwork
|
2019-02-11 23:28:16 +01:00 |
|
LP_0026_windows_audit_user_account_management.md
|
ra rp initial
|
2019-02-06 23:07:31 +01:00 |
|
LP_0027_windows_audit_directory_service_access.md
|
code de-hardcoding, powershell events groundwork
|
2019-02-11 23:28:16 +01:00 |
|
LP_0028_windows_audit_sam.md
|
code de-hardcoding, powershell events groundwork
|
2019-02-11 23:28:16 +01:00 |
|
LP_0029_windows_audit_detailed_file_share.md
|
code de-hardcoding, powershell events groundwork
|
2019-02-11 23:28:16 +01:00 |
|
LP_0030_windows_audit_file_share.md
|
code de-hardcoding, powershell events groundwork
|
2019-02-11 23:28:16 +01:00 |
|
LP_0100_windows_audit_security_system_extension.md
|
code de-hardcoding, powershell events groundwork
|
2019-02-11 23:28:16 +01:00 |
