 phantinuss
|
07a0a37273
|
feat: discourage the usage of 'all of them' and migrate existing rules to use the preferred method 'all of selection*'
|
2021-12-02 14:47:39 +01:00 |
|
|
frack113
|
01dc930c17
|
Change status for old rules
|
2021-11-27 11:33:14 +01:00 |
|
|
Florian Roth
|
3cdb88ad55
|
refactor: level of suspicious parent for powershell rule
|
2021-08-24 12:30:40 +02:00 |
|
|
grikos
|
293662810e
|
att&ck tags review: windows/process_creation part 8
|
2020-08-28 17:14:26 +03:00 |
|
|
Aidan Bracher
|
4ffe9cb042
|
Updated tags with sub-techniques
|
2020-07-18 02:53:46 +01:00 |
|
|
Florian Roth
|
5a11ef90d0
|
rule reorganized
|
2020-06-29 21:24:47 +02:00 |
|
|
Harish SEGAR
|
1a088425f9
|
Fix rules.
|
2020-06-29 20:42:35 +02:00 |
|
|
Harish SEGAR
|
ba3994f319
|
Fix of '1 of x' condition
|
2020-03-21 12:19:01 +01:00 |
|
|
Harish SEGAR
|
81b277ba1a
|
suspicious powershell parent process...
|
2020-03-21 00:26:30 +01:00 |
|