4 Commits

Author	SHA1	Message	Date
Florian Roth	50efc894bc	add common "set" expressions ... add common caret obfuscated "set" expressions often found in Invoke-Obfuscation code	2022-02-16 17:33:33 +01:00
Florian Roth	8850de3a2e	exclude values that could be prone to FPs ... Sorry, I have to disable some of the values. I guess these values would make the rule trigger many false positives.	2022-02-16 17:31:52 +01:00
frack113	fb71c1bb67	fix double double quote	2022-02-16 17:19:01 +01:00
frack113	98975ef50e	add win_pc_cmd_dosfuscation	2022-02-15 17:58:39 +01:00