Swachchhanda Shrawan Poudel f58b44eb16 Merge #5798 from @swachchhanda000 - fix: aurora fps ...

fix: Rare Remote Thread Creation By Uncommon Source Image - filter provtool system
fix: Load Of RstrtMgr.DLL By An Uncommon Process - filter OneDriveStandaloneUpdater.exe
fix: Wow6432Node CurrentVersion Autorun Keys Modification - filter null Details

---------

Co-authored-by: phantinuss <79651203+phantinuss@users.noreply.github.com>

2025-12-09 08:21:14 +05:45

..

create_remote_thread_win_hktl_cactustorch.yml

chore: ci: bump validator version (#5722)

2025-10-23 15:43:47 +02:00

create_remote_thread_win_hktl_cobaltstrike.yml

chore: ci: bump validator version (#5722)

2025-10-23 15:43:47 +02:00

create_remote_thread_win_keepass.yml

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

create_remote_thread_win_mstsc_susp_location.yml

Merge PR #5101 from @nasbench - Promote older rules status from experimental to test

2024-12-01 13:40:32 +01:00

create_remote_thread_win_powershell_lsass.yml

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

create_remote_thread_win_powershell_susp_targets.yml

Merge PR #5027 from @nasbench - Promote older rules status from experimental to test

2024-10-01 14:56:09 +02:00

create_remote_thread_win_susp_password_dumper_lsass.yml

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

create_remote_thread_win_susp_relevant_source_image.yml

Merge #5798 from @swachchhanda000 - fix: aurora fps

2025-12-09 08:21:14 +05:45

create_remote_thread_win_susp_uncommon_source_image.yml

Merge PR #5513 from @swachchhanda000 - fix FPs observed via Aurora

2025-07-08 10:29:01 +02:00

create_remote_thread_win_susp_uncommon_target_image.yml

Merge PR #5513 from @swachchhanda000 - fix FPs observed via Aurora

2025-07-08 10:29:01 +02:00

create_remote_thread_win_ttdinjec.yml

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00