6 Commits

Author	SHA1	Message	Date
Florian Roth	beb62dc163	fix: condition location	2020-05-15 12:06:34 +02:00
Florian Roth	28dc2a2267	Minor changes ... hints: - contains doesn't require wildcards in the strings - we can use 'endswith' instead of wildcard at the beginning of the string (it's the new way to describe it, we have to change all old rules that contain these wildcards some day) - we can use "1 of them" to say that 1 of the conditions has to match	2020-05-15 11:33:36 +02:00
Trent Liffick	40ab1b7247	added 'action: global'	2020-05-14 23:33:08 -04:00
Trent Liffick	56a2747a70	Corrected missing condition ... learning! fail fast & forward	2020-05-14 23:18:33 -04:00
Trent Liffick	fb1d8d7a76	Corrected typo	2020-05-14 23:04:14 -04:00
Trent Liffick	8aff6b412e	added rule for Blue Mockingbird (cryptominer)	2020-05-14 22:58:23 -04:00