frack113 7dc574bc01 Merge pull request #2078 from kidrek/win_process_dump_rdrleakdiag ...

add new rule win_process_dump_rdrleakdiag

2021-09-25 07:55:52 +02:00

..

builtin

fix filename

2021-09-23 14:52:56 +02:00

create_remote_thread

fix condition operator case

2021-09-10 13:51:52 +02:00

create_stream_hash

Merging upstream updates

2021-07-01 12:18:30 +05:45

deprecated

Clean SyncAppvPublishingServer rules

2021-09-12 07:46:35 +02:00

dns_query

split global sysmon_regsvr32_network_activity.yml

2021-09-21 10:33:47 +02:00

driver_load

fix field name and date

2021-09-21 19:41:46 +02:00

file_delete

Update cve tags

2021-08-24 10:27:27 +02:00

file_event

Merge pull request #1926 from pbssubhash/master

2021-09-23 14:08:15 +02:00

image_load

split global sysmon_tttracer_mod_load.yml

2021-09-21 10:39:02 +02:00

malware

fix related

2021-09-11 14:22:01 +02:00

network_connection

fix tests.py error

2021-09-21 10:52:37 +02:00

other

fix filename

2021-09-22 18:45:08 +02:00

pipe_created

split global win_tool_psexec.yml

2021-09-21 10:10:48 +02:00

powershell

Merge pull request #2063 from frack113/last_global

2021-09-23 13:54:57 +02:00

process_access

Various fixes

2021-09-07 23:38:07 +02:00

process_creation

The issues have been fixed

2021-09-24 22:18:00 +02:00

raw_access_thread

Fix selection with only 1 element

2021-08-14 09:54:27 +02:00

registry_event

convert re to endswith

2021-09-24 15:39:56 +02:00

sysmon

fix filename

2021-09-22 16:27:05 +02:00

wmi_event

fix: tags for WMI / execution / persistence

2021-09-01 16:34:50 +02:00