 Austin Songer
|
c9128687ee
|
Spelling Errors on Rules
|
2021-08-18 18:58:20 +00:00 |
|
|
Anton Kutepov
|
3f45269296
|
Merge branch 'oscd'
B
B
B
B
A
|
2021-03-02 22:58:41 +03:00 |
|
|
Florian Roth
|
9d937705c0
|
fix: null values in separate filter expression
> null value in lists cause problems in some backends
|
2021-02-25 15:19:26 +01:00 |
|
|
Florian Roth
|
9eb55016bf
|
fix: FPs with WMI Spawning Windows PowerShell
|
2021-02-24 13:32:30 +01:00 |
|
|
Jonhnathan
|
eb9bac761f
|
Update win_wmi_spwns_powershell.yml
|
2020-10-15 20:00:44 -03:00 |
|
|
grikos
|
6092bfcec1
|
att&ck tags review: windows/process_creation part 9
|
2020-08-29 19:22:09 +03:00 |
|
|
Ivan Kirillov
|
0fbfcc6ba9
|
Initial round of subtechnique updates
|
2020-06-16 14:46:08 -06:00 |
|
|
Thomas Patzke
|
0592cbb67a
|
Added UUIDs to rules
|
2019-11-12 23:12:27 +01:00 |
|
|
Thomas Patzke
|
5f6a4225ec
|
Unified line terminators of rules to Unix
|
2019-11-12 23:05:36 +01:00 |
|
|
Karneades
|
766b8b8d18
|
Fix condition
|
2019-04-04 22:32:47 +02:00 |
|
|
Karneades
|
1915561351
|
Remove to loose wildcard from wmi spwns powershell rule
|
2019-04-04 22:12:28 +02:00 |
|
|
t0x1c-1
|
7e058e611c
|
WMI spawning PowerShell seen in various attacks
|
2019-04-03 16:56:45 +02:00 |
|