 Florian Roth
|
f728893364
|
refactor: rule level adjustments - critical to high
|
2022-06-18 17:43:22 +02:00 |
|
|
phantinuss
|
112b715dd6
|
chore: test rules: reactivate single value list check
|
2022-05-10 17:13:04 +02:00 |
|
|
Tobias Michalski
|
b1c395d65c
|
fix: Rule Creating way too many FPs to be high
|
2022-05-06 15:56:08 +02:00 |
|
|
phantinuss
|
9b82e099a3
|
fix: unlikely --> Unlikely
|
2022-03-16 14:16:10 +01:00 |
|
|
Florian Roth
|
3b67b44b82
|
Merge branch 'aurora-false-positive-fixing' of https://github.com/SigmaHQ/sigma into aurora-false-positive-fixing
|
2022-02-09 18:18:59 +01:00 |
|
|
Florian Roth
|
2bbf6089ed
|
fix: FPs, wrong modifier
|
2022-02-09 18:18:57 +01:00 |
|
|
Florian Roth
|
42ecaf2254
|
Merge branch 'master' into aurora-false-positive-fixing
|
2022-02-09 17:59:16 +01:00 |
|
|
Florian Roth
|
0d3c7aafe8
|
fix: FPs with Microsoft Defender LSASS ASR events
|
2022-02-09 17:24:29 +01:00 |
|
|
Florian Roth
|
a60426e4a2
|
Update win_alert_lsass_access.yml
|
2022-02-07 15:43:04 +01:00 |
|
|
phantinuss
|
ed2025e626
|
fix: FPs
|
2022-02-07 15:32:15 +01:00 |
|
|
phantinuss
|
2d36c6222d
|
fix: FPs found in prod environment
|
2022-02-02 11:03:19 +01:00 |
|
|
frack113
|
7053d42e43
|
move to builtin
|
2022-01-21 11:59:13 +01:00 |
|