 frack113
|
acf59f9795
|
Fix some errors
|
2021-08-30 19:49:44 +02:00 |
|
|
frack113
|
da839775fe
|
Update PS rules
|
2021-08-21 09:50:59 +02:00 |
|
|
aw350m3
|
eb6b9be5a2
|
added missing ATT&CK v6.3 IDs with comments and removed unnecessary "modified" attributes
|
2020-08-25 23:51:22 +00:00 |
|
|
aw350m3
|
399f378269
|
att&ck tags review: windows/powershell, windows/process_access, windows/network_connection
|
2020-08-24 23:31:26 +00:00 |
|
|
Ryan Plas
|
04fd598bcf
|
Update additional rules to have correct logsource attributes
|
2020-07-13 17:02:17 -04:00 |
|
|
Remco Hofman
|
b791d599ee
|
Disabled keywords that could cause FPs
|
2020-03-30 08:53:52 +02:00 |
|
|
Remco Hofman
|
f52ed4150d
|
WMImplant parameter detection
|
2020-03-27 15:08:35 +01:00 |
|