frack113 0ca16b18f4 Change to category: ps_module

2021-10-16 08:05:15 +02:00

..

powershell_classic

order powershell_classic

2021-10-07 07:40:53 +02:00

powershell_module

Change to category: ps_module

2021-10-16 08:05:15 +02:00

powershell_script

Update powershell_windows_firewall_profile_disabled.yml

2021-10-13 07:01:04 -05:00

powershell_suspicious_download.yml

split powershell_suspicious_download.yml

2021-09-21 09:46:02 +02:00

powershell_suspicious_invocation_generic.yml

added missing ATT&CK v6.3 IDs with comments and removed unnecessary "modified" attributes

2020-08-25 23:51:22 +00:00

powershell_suspicious_invocation_specific.yml

Update PS rules

2021-08-21 09:50:59 +02:00

powershell_syncappvpublishingserver_exe.yml

split global rules

2021-09-11 20:30:32 +02:00