Florian Roth 0afe0623af Merge pull request #757 from tliffick/master ...

added rule for Blue Mockingbird (cryptominer)

2020-05-25 10:47:23 +02:00

..

builtin

Update win_alert_ad_user_backdoors.yml

2020-05-19 14:50:22 +02:00

deprecated

fix: buggy rule

2020-05-23 18:32:02 +02:00

malware

fix: condition location

2020-05-15 12:06:34 +02:00

other

fix: converted CRLF line break to LF

2020-03-25 14:36:34 +01:00

powershell

fix incorrect use of action global

2020-05-06 22:53:02 +02:00

process_creation

Update win_netsh_fw_add.yml

2020-05-25 10:13:26 +02:00

sysmon

Remove AppData folder as suspicious folder

2020-05-24 15:16:07 +02:00