9 Commits

Author	SHA1	Message	Date
Nasreddine Bencherchali	598d29f811	Merge PR #4950 from @nasbench - Comply With v2 Spec Changes ... chore: change tags, date, modified fields to comply with v2 of the Sigma spec. chore: update the related type from `obsoletes` to `obsolete`. chore: update local json schema to the latest version.	2024-08-12 12:02:50 +02:00
github-actions[bot]	f7ec533704	Merge PR #4841 from @nasbench - Promote older rules status from experimental to test ... chore: promote older rules status from "experimental" to "test"	2024-05-02 10:34:25 +02:00
Nasreddine Bencherchali	917e5bee68	fix: update filter name	2023-06-14 15:35:33 +02:00
frack113	9ad36c796b	Fix svchost FP ... Signed-off-by: frack113 <magicfrancois@gmail.com>	2023-06-14 11:33:58 +02:00
frack113	1f8e37351e	order yaml	2022-10-28 15:06:36 +02:00
Nasreddine Bencherchali	f0e05ccb3c	Rule Update (Batch 2) ... - Added 5 more PowerShell scripts for the rule "file_event_win_powershell_exploit_scripts.yml" - Created new rule for "certoc" lolbin to cover "Download" option as described in the LOLBAS project - Created specific rule for the "IEExec" lolbin to cover "Download" option as described in the LOLBAS Project - Updated some rules to use "OriginalFileName" in addition to the "Image" selection - Updated some rules to increase coverage.	2022-05-16 22:02:41 +01:00
Florian Roth	f21961f366	Update proc_creation_win_lolbin_gpscript.yml	2022-05-05 07:57:31 +02:00
frack113	2ec87f0459	Fix errors	2022-05-02 20:05:30 +02:00
frack113	74cdc43549	Lolbin rules	2022-05-02 19:19:12 +02:00