Commit Graph

23 Commits

Author SHA1 Message Date
Nasreddine Bencherchali 6819d264cc fix: update evtx tamper rules 2023-01-02 15:25:19 +01:00
frack113 aee5ca7afc Fix invalid field cast or name (#3841) 2022-12-30 11:46:21 +01:00
Nasreddine Bencherchali e6baac1bf2 fix: exclude teamviewer fp & reduce severity 2022-12-23 20:50:38 +01:00
frack113 20ef4b880c Exclude SetupFrontEnd.exe 2022-10-31 18:49:53 +01:00
frack113 f78e9e9034 Add rule
Co-authored-by: Nasreddine Bencherchali <8741929+nasbench@users.noreply.github.com>
2022-10-24 17:52:05 +02:00
phantinuss 736ba904b0 fix: add new FP to whitelist, no tuning possible 2022-10-21 17:41:32 +02:00
phantinuss c5fb5e1c95 fix: remove FPs found in goodlogs 2022-10-12 17:04:31 +02:00
Nasreddine Bencherchali 48cb48306e Update known-FPs.csv 2022-10-04 11:41:17 +02:00
phantinuss f940a43d8f workflow: use correct rule title 2022-09-21 13:51:20 +02:00
phantinuss 40e0dfcb29 chore: add new known FPs 2022-09-21 13:45:28 +02:00
Nasreddine Bencherchali 35f102f8a0 Update known-FPs.csv 2022-08-31 11:40:39 +02:00
Nasreddine Bencherchali 475bb1a90b Update known-FPs.csv 2022-08-31 11:12:18 +02:00
Nasreddine Bencherchali b0768ed5cd Update known-FPs.csv 2022-08-31 11:05:41 +02:00
Nasreddine Bencherchali b7fe798a8d Update known-FPs.csv 2022-08-31 10:24:04 +02:00
frack113 acbc9110e4 Add short name path 2022-08-07 08:38:11 +02:00
frack113 f1eba85780 Add short name path 2022-08-07 08:37:58 +02:00
frack113 c38bfe86da Add short path and Image 2022-08-06 11:25:44 +02:00
phantinuss b18184a58f workflow: add baseline chack for Windows 2022 domain controller 2022-04-21 10:48:59 +02:00
phantinuss d323753abd workflow: new baseline check against Windows 7 32-bit 2022-04-06 17:06:54 +02:00
phantinuss 49a38185b2 workflow: add known FP 2022-04-06 16:09:53 +02:00
phantinuss b0c1c3e726 workflow: new baseline check against Windows 11 2022-04-06 16:09:51 +02:00
Florian Roth cc9a5b4b07 fix: FPs with new rules 2022-02-22 13:32:34 +01:00
phantinuss 0c473a3e77 workflow: evaluate findings, exclude known FPs 2022-02-21 11:01:44 +01:00