 frack113
|
01dc930c17
|
Change status for old rules
|
2021-11-27 11:33:14 +01:00 |
|
|
e6e6e
|
98c412044a
|
att&ck tags review: windows/process_creation part 5
added missing ATT&CK v6.3 IDs with comments and removed unnecessary "modified" attributes
|
2020-09-07 02:00:41 +04:00 |
|
|
e6e6e
|
7ae76b8d99
|
Revert "att&ck tags review: windows/process_creation part 5"
This reverts commit e94c47e74e.
|
2020-09-07 01:28:08 +04:00 |
|
|
e6e6e
|
e94c47e74e
|
att&ck tags review: windows/process_creation part 5
added missing ATT&CK v6.3 IDs with comments and removed unnecessary "modified" attributes
|
2020-09-07 01:19:41 +04:00 |
|
|
Andreas Hunkeler
|
7d437c2969
|
Add netsh to renamed binary rule
|
2020-04-20 17:12:25 +02:00 |
|
|
yugoslavskiy
|
efc404fbae
|
resolve conflicts with rule IDs; restored and deprecated sysmon_mimikatz_detection_lsass.yml
|
2019-11-19 02:11:19 +01:00 |
|
|
yugoslavskiy
|
cb29628ceb
|
modify rules based on BSI contribution
|
2019-11-14 00:23:16 +03:00 |
|
|
Thomas Patzke
|
0592cbb67a
|
Added UUIDs to rules
|
2019-11-12 23:12:27 +01:00 |
|
|
ecco
|
7a1d48cccd
|
fix: PsExec false positives
|
2019-09-26 04:50:43 -04:00 |
|
|
Thomas Patzke
|
ff7128209e
|
Adjusted level
|
2019-06-20 00:03:48 +02:00 |
|
|
Thomas Patzke
|
0f8849a652
|
Rule fixes
* tagging
* removed spaces
* converted to generic log source
* typos/case
|
2019-06-20 00:01:56 +02:00 |
|