 yugoslavskiy
|
78193d3e3a
|
Update win_mal_adwind.yml
|
2020-11-28 11:25:28 +01:00 |
|
|
Jonhnathan
|
483748c2c3
|
Update win_mal_adwind.yml
|
2020-10-15 17:59:24 -03:00 |
|
|
Jonhnathan
|
3ca2988828
|
Update win_mal_adwind.yml
|
2020-10-15 17:59:04 -03:00 |
|
|
aw350m3
|
8ed3eb1494
|
att&ck tags review: windows/process_creation part 3
|
2020-09-01 17:02:59 +00:00 |
|
|
Ivan Kirillov
|
b343df2225
|
Further subtechnique updates
|
2020-06-17 11:31:40 -06:00 |
|
|
ecco
|
b9e4734087
|
fix sysmon registry rules with HKLM/HKU format as used since 02/2017 in sysmon
|
2020-03-04 12:47:42 -05:00 |
|
|
Thomas Patzke
|
0592cbb67a
|
Added UUIDs to rules
|
2019-11-12 23:12:27 +01:00 |
|
|
Florian Roth
|
2ad2ba9589
|
fix: rule field fix in proc_creation rule
|
2019-03-22 10:59:18 +01:00 |
|
|
mrblacyk
|
99595a7f89
|
Added missing tags and some minor improvements
|
2019-03-05 23:25:49 +01:00 |
|
|
Thomas Patzke
|
7602309138
|
Increased indentation to 4
* Converted (to generic sigma) rules
* Converter outputs by default with indentation 4
|
2019-03-02 00:14:20 +01:00 |
|
|
Thomas Patzke
|
c922f7d73f
|
Merge branch 'master' into project-1
|
2019-02-26 00:24:46 +01:00 |
|
|
Thomas Patzke
|
96eb460944
|
Converted Sysmon/1 and Security/4688 to generic process creation rules
|
2019-01-16 23:36:31 +01:00 |
|