Nasreddine Bencherchali
|
6819d264cc
|
fix: update evtx tamper rules
|
2023-01-02 15:25:19 +01:00 |
|
frack113
|
aee5ca7afc
|
Fix invalid field cast or name (#3841)
|
2022-12-30 11:46:21 +01:00 |
|
Nasreddine Bencherchali
|
e6baac1bf2
|
fix: exclude teamviewer fp & reduce severity
|
2022-12-23 20:50:38 +01:00 |
|
frack113
|
20ef4b880c
|
Exclude SetupFrontEnd.exe
|
2022-10-31 18:49:53 +01:00 |
|
frack113
|
f78e9e9034
|
Add rule
Co-authored-by: Nasreddine Bencherchali <8741929+nasbench@users.noreply.github.com>
|
2022-10-24 17:52:05 +02:00 |
|
phantinuss
|
736ba904b0
|
fix: add new FP to whitelist, no tuning possible
|
2022-10-21 17:41:32 +02:00 |
|
phantinuss
|
c5fb5e1c95
|
fix: remove FPs found in goodlogs
|
2022-10-12 17:04:31 +02:00 |
|
Nasreddine Bencherchali
|
48cb48306e
|
Update known-FPs.csv
|
2022-10-04 11:41:17 +02:00 |
|
phantinuss
|
f940a43d8f
|
workflow: use correct rule title
|
2022-09-21 13:51:20 +02:00 |
|
phantinuss
|
40e0dfcb29
|
chore: add new known FPs
|
2022-09-21 13:45:28 +02:00 |
|
Nasreddine Bencherchali
|
35f102f8a0
|
Update known-FPs.csv
|
2022-08-31 11:40:39 +02:00 |
|
Nasreddine Bencherchali
|
475bb1a90b
|
Update known-FPs.csv
|
2022-08-31 11:12:18 +02:00 |
|
Nasreddine Bencherchali
|
b0768ed5cd
|
Update known-FPs.csv
|
2022-08-31 11:05:41 +02:00 |
|
Nasreddine Bencherchali
|
b7fe798a8d
|
Update known-FPs.csv
|
2022-08-31 10:24:04 +02:00 |
|
frack113
|
acbc9110e4
|
Add short name path
|
2022-08-07 08:38:11 +02:00 |
|
frack113
|
f1eba85780
|
Add short name path
|
2022-08-07 08:37:58 +02:00 |
|
frack113
|
c38bfe86da
|
Add short path and Image
|
2022-08-06 11:25:44 +02:00 |
|
phantinuss
|
b18184a58f
|
workflow: add baseline chack for Windows 2022 domain controller
|
2022-04-21 10:48:59 +02:00 |
|
phantinuss
|
d323753abd
|
workflow: new baseline check against Windows 7 32-bit
|
2022-04-06 17:06:54 +02:00 |
|
phantinuss
|
49a38185b2
|
workflow: add known FP
|
2022-04-06 16:09:53 +02:00 |
|
phantinuss
|
b0c1c3e726
|
workflow: new baseline check against Windows 11
|
2022-04-06 16:09:51 +02:00 |
|
Florian Roth
|
cc9a5b4b07
|
fix: FPs with new rules
|
2022-02-22 13:32:34 +01:00 |
|
phantinuss
|
0c473a3e77
|
workflow: evaluate findings, exclude known FPs
|
2022-02-21 11:01:44 +01:00 |
|