 frack113
|
01dc930c17
|
Change status for old rules
|
2021-11-27 11:33:14 +01:00 |
|
|
Jonhnathan
|
3f5a2af2db
|
Update win_mshta_spawn_shell.yml
|
2020-11-27 15:43:29 -03:00 |
|
|
Jonhnathan
|
143f9d00c5
|
Update win_mshta_spawn_shell.yml
|
2020-10-15 18:10:38 -03:00 |
|
|
Yugoslavskiy Daniil
|
11e0f794d9
|
review windows/process_creation part 4
|
2020-09-02 02:34:34 +02:00 |
|
|
Ivan Kirillov
|
0fbfcc6ba9
|
Initial round of subtechnique updates
|
2020-06-16 14:46:08 -06:00 |
|
|
Florian Roth
|
e79e99c4aa
|
fix: fixed missing date fields in remaining files
|
2020-01-30 16:07:37 +01:00 |
|
|
Thomas Patzke
|
0592cbb67a
|
Added UUIDs to rules
|
2019-11-12 23:12:27 +01:00 |
|
|
Michael Wade
|
f70549ec54
|
First Pass
|
2019-06-13 23:15:38 -05:00 |
|
|
Florian Roth
|
74dd008b10
|
FP note for HP software
|
2019-04-19 09:51:32 +02:00 |
|
|
Karneades
|
97376c00de
|
Fix condition
|
2019-04-04 22:33:32 +02:00 |
|
|
Karneades
|
eb690d8902
|
Remove too loose filter in mshta rule
|
2019-04-04 22:16:24 +02:00 |
|
|
Thomas Patzke
|
7602309138
|
Increased indentation to 4
* Converted (to generic sigma) rules
* Converter outputs by default with indentation 4
|
2019-03-02 00:14:20 +01:00 |
|
|
Thomas Patzke
|
96eb460944
|
Converted Sysmon/1 and Security/4688 to generic process creation rules
|
2019-01-16 23:36:31 +01:00 |
|