 Thomas Patzke
|
3ef930b094
|
Escaped '\*' to '\\*' where required
|
2019-02-03 00:24:57 +01:00 |
|
|
ntim
|
c99dc9f643
|
Tagged windows powershell, other and malware rules.
|
2018-07-24 10:56:41 +02:00 |
|
|
Thomas Patzke
|
84645f4e59
|
Simplified rule conditions with new condition constructs
|
2018-03-06 23:14:43 +01:00 |
|
|
SherifEldeeb
|
348728bdd9
|
Cleaning up empty list items
|
2018-01-28 02:36:39 +03:00 |
|
|
SherifEldeeb
|
48441962cc
|
Change All "str" references to be "list"to mach schema update
|
2018-01-28 02:24:16 +03:00 |
|
|
SherifEldeeb
|
112a0939d7
|
Change "reference" to "references" to match new schema
|
2018-01-28 02:12:19 +03:00 |
|
|
Thomas Patzke
|
986c9ff9b7
|
Added field names to first rules
|
2017-09-12 23:54:04 +02:00 |
|
|
Florian Roth
|
950a00f33e
|
Updated Petya rule
|
2017-06-28 12:52:58 +02:00 |
|
|
Florian Roth
|
ece1d7e3a8
|
Added perfc.dat keyword to NotPetya rule
|
2017-06-28 10:35:42 +02:00 |
|
|
Florian Roth
|
a3e0e37163
|
NotPetya Title Fixed
|
2017-06-28 09:12:39 +02:00 |
|
|
Florian Roth
|
8c437de970
|
NotPetya Sigma Rule for Sysmon Events
|
2017-06-28 09:09:12 +02:00 |
|