5 Commits

Author	SHA1	Message	Date
Florian Roth	8f684ddd06	Rule: FP in WMI persistence with SCCM	2019-02-05 15:57:54 +01:00
Florian Roth	fd34437575	fix: fixed date in rule	2018-10-10 15:27:58 +02:00
Florian Roth	dea019f89d	fix: some threat levels adjusted	2018-07-07 13:00:23 -06:00
Florian Roth	52d405bb1b	Improved shell spawning rule	2018-04-11 20:09:42 +02:00
Florian Roth	a9c7fe202e	Rule: Windows shell spawning suspicious program	2018-04-09 08:37:30 +02:00