| .. |
|
dataneeded.yml.template
|
changed directories names
|
2019-02-12 04:55:11 +01:00 |
|
DN_0001_4688_windows_process_creation.yml
|
changed directories names
|
2019-02-12 04:55:11 +01:00 |
|
DN_0002_4688_windows_process_creation_with_commandline.yml
|
changed directories names
|
2019-02-12 04:55:11 +01:00 |
|
DN_0003_1_windows_sysmon_process_creation.yml
|
changed directories names
|
2019-02-12 04:55:11 +01:00 |
|
DN_0004_4624_windows_account_logon.yml
|
changed directories names
|
2019-02-12 04:55:11 +01:00 |
|
DN_0005_7045_windows_service_insatalled.yml
|
changed directories names
|
2019-02-12 04:55:11 +01:00 |
|
DN_0006_2_windows_sysmon_process_changed_a_file_creation_time.yml
|
changed directories names
|
2019-02-12 04:55:11 +01:00 |
|
DN_0007_3_windows_sysmon_network_connection.yml
|
changed directories names
|
2019-02-12 04:55:11 +01:00 |
|
DN_0008_4_windows_sysmon_sysmon_service_state_changed.yml
|
changed directories names
|
2019-02-12 04:55:11 +01:00 |
|
DN_0009_5_windows_sysmon_process_terminated.yml
|
changed directories names
|
2019-02-12 04:55:11 +01:00 |
|
DN_0010_6_windows_sysmon_driver_loaded.yml
|
changed directories names
|
2019-02-12 04:55:11 +01:00 |
|
DN_0011_7_windows_sysmon_image_loaded.yml
|
changed directories names
|
2019-02-12 04:55:11 +01:00 |
|
DN_0012_8_windows_sysmon_CreateRemoteThread.yml
|
changed directories names
|
2019-02-12 04:55:11 +01:00 |
|
DN_0013_9_windows_sysmon_RawAccessRead.yml
|
changed directories names
|
2019-02-12 04:55:11 +01:00 |
|
DN_0014_10_windows_sysmon_ProcessAccess.yml
|
changed directories names
|
2019-02-12 04:55:11 +01:00 |
|
DN_0015_11_windows_sysmon_FileCreate.yml
|
changed directories names
|
2019-02-12 04:55:11 +01:00 |
|
DN_0016_12_windows_sysmon_RegistryEvent.yml
|
changed directories names
|
2019-02-12 04:55:11 +01:00 |
|
DN_0017_13_windows_sysmon_RegistryEvent.yml
|
changed directories names
|
2019-02-12 04:55:11 +01:00 |
|
DN_0018_14_windows_sysmon_RegistryEvent.yml
|
changed directories names
|
2019-02-12 04:55:11 +01:00 |
|
DN_0019_15_windows_sysmon_FileCreateStreamHash.yml
|
changed directories names
|
2019-02-12 04:55:11 +01:00 |
|
DN_0020_17_windows_sysmon_PipeEvent.yml
|
changed directories names
|
2019-02-12 04:55:11 +01:00 |
|
DN_0021_18_windows_sysmon_PipeEvent.yml
|
changed directories names
|
2019-02-12 04:55:11 +01:00 |
|
DN_0022_19_windows_sysmon_WmiEvent.yml
|
changed directories names
|
2019-02-12 04:55:11 +01:00 |
|
DN_0023_20_windows_sysmon_WmiEvent.yml
|
changed directories names
|
2019-02-12 04:55:11 +01:00 |
|
DN_0024_21_windows_sysmon_WmiEvent.yml
|
changed directories names
|
2019-02-12 04:55:11 +01:00 |
|
DN_0025_1102_the_audit_log_was_cleared.yml
|
new dn and lp
|
2019-04-22 05:18:31 +02:00 |
|
DN_0026_5136_windows_directory_service_object_was_modified.yml
|
changed directories names
|
2019-02-12 04:55:11 +01:00 |
|
DN_0027_4738_user_account_was_changed.yml
|
changed directories names
|
2019-02-12 04:55:11 +01:00 |
|
DN_0028_4794_directory_services_restore_mode_admin_password_set.yml
|
changed directories names
|
2019-02-12 04:55:11 +01:00 |
|
DN_0029_4661_handle_to_an_object_was_requested.yml
|
changed directories names
|
2019-02-12 04:55:11 +01:00 |
|
DN_0030_4662_operation_was_performed_on_an_object.yml
|
changed directories names
|
2019-02-12 04:55:11 +01:00 |
|
DN_0031_7036_service_started_stopped.yml
|
changed directories names
|
2019-02-12 04:55:11 +01:00 |
|
DN_0032_5145_network_share_object_was_accessed_detailed.yml
|
changed directories names
|
2019-02-12 04:55:11 +01:00 |
|
DN_0033_5140_network_share_object_was_accessed.yml
|
changed directories names
|
2019-02-12 04:55:11 +01:00 |
|
DN_0034_104_log_file_was_cleared.yml
|
changed directories names
|
2019-02-12 04:55:11 +01:00 |
|
DN_0035_106_task_scheduler_task_registered.yml
|
changed directories names
|
2019-02-12 04:55:11 +01:00 |
|
DN_0036_4104_windows_powershell_script_block.yml
|
changed directories names
|
2019-02-12 04:55:11 +01:00 |
|
DN_0037_4103_windows_powershell_executing_pipeline.yml
|
changed directories names
|
2019-02-12 04:55:11 +01:00 |
|
DN_0038_400_windows_powershell_engine_lifecycle.yml
|
changed directories names
|
2019-02-12 04:55:11 +01:00 |
|
DN_0044_1000_application_crashed.yaml
|
Update DN_0044_1000_application_crashed.yaml
|
2019-03-06 11:34:05 +01:00 |
|
DN_0045_1001_windows_error_reporting.yaml
|
Add Data Needed DN_0045_1001_windows_error_reporting
|
2019-03-06 20:04:02 +01:00 |
|
DN_0046_1031_dhcp_service_callout_dll_file_has_caused_an_exception.yml
|
events 1031-1034, without samples
|
2019-03-02 23:11:48 +01:00 |
|
DN_0047_1032_dhcp_service_callout_dll_file_has_caused_an_exception.yml
|
events 1031-1034, without samples
|
2019-03-02 23:11:48 +01:00 |
|
DN_0048_1033_dhcp_service_successfully_loaded_callout_dlls.yml
|
events 1031-1034, without samples
|
2019-03-02 23:11:48 +01:00 |
|
DN_0049_1034_dhcp_service_failed_to_load_callout_dlls.yml
|
events 1031-1034, without samples
|
2019-03-02 23:11:48 +01:00 |
|
DN_0050_1102_audit_log_was_cleared.yml
|
new dn and lp
|
2019-04-22 05:18:31 +02:00 |
|
DN_0057_4625_account_failed_to_logon.yml
|
new dn and lp
|
2019-04-22 05:18:31 +02:00 |
|
DN_0058_4656_handle_to_an_object_was_requested.yml
|
new dn and lp
|
2019-04-22 05:18:31 +02:00 |
|
DN_0059_4657_registry_value_was_modified.yml
|
new dn and lp
|
2019-04-22 05:18:31 +02:00 |
|
DN_0060_4658_handle_to_an_object_was_closed.yml
|
new dn and lp
|
2019-04-22 05:18:31 +02:00 |
|
DN_0061_4660_object_was_deleted.yml
|
new dn and lp
|
2019-04-22 05:18:31 +02:00 |
|
DN_0062_4663_attempt_was_made_to_access_an_object.yml
|
new dn and lp
|
2019-04-22 05:18:31 +02:00 |
|
DN_0063_4697_service_was_installed_in_the_system.yml
|
changed directories names
|
2019-02-12 04:55:11 +01:00 |
|
DN_0064_4698_scheduled_task_was_created.yml
|
added DN_0064
|
2019-04-22 21:59:10 +02:00 |
|
DN_0065_4701_scheduled_task_was_disabled.yml
|
new dn and lp
|
2019-04-22 05:18:31 +02:00 |
|
DN_0066_4704_user_right_was_assigned.yml
|
new dn and lp
|
2019-04-22 05:18:31 +02:00 |
|
DN_0067_4719_system_audit_policy_was_changed.yml
|
new dn and lp
|
2019-04-22 05:18:31 +02:00 |
|
DN_0069_4732_member_was_added_to_security_enabled_local_group.yml
|
new dn and lp
|
2019-04-22 05:18:31 +02:00 |
|
DN_0070_4735_security_enabled_local_group_was_changed.yml
|
new dn and lp
|
2019-04-22 05:18:31 +02:00 |
|
DN_0076_4768_kerberos_authentication_ticket_was_requested.yml
|
new dn and lp
|
2019-04-22 05:18:31 +02:00 |
|
DN_0077_4769_kerberos_service_ticket_was_requested.yml
|
new dn and lp
|
2019-04-22 05:18:31 +02:00 |
|
DN_0078_4771_kerberos_pre_authentication_failed.yml
|
new dn and lp
|
2019-04-22 05:18:31 +02:00 |
|
DN_0079_4776_computer_attempted_to_validate_the_credentials_for_an_account.yml
|
new dn and lp
|
2019-04-22 05:18:31 +02:00 |
|
DN_0080_5859_wmi_activity.yml
|
changed LP
|
2019-02-13 21:20:06 +01:00 |
|
DN_0081_5861_wmi_activity.yml
|
changed LP
|
2019-02-13 21:20:06 +01:00 |
|
DN_0082_8002_ntlm_server_blocked_audit.yml
|
fixed issue #99
|
2019-03-03 01:40:08 +01:00 |
|
DN_0083_16_access_history_in_hive_was_cleared.yml
|
changed directories names
|
2019-02-12 04:55:11 +01:00 |
|
DN_0084_av_alert.yml
|
added AV DN
|
2019-02-13 19:28:28 +01:00 |
|
DN_0108_150_dns_server_could_not_load_dll.yml
|
fixind issue #53
|
2019-03-02 20:34:07 +01:00 |
