Nasreddine Bencherchali 5232094c71 fix: more fp found in testing and enhance fp metadata

2022-12-13 11:25:23 +01:00

..

win_audit_cve.yml

Order yaml field

2022-10-25 11:08:51 +02:00

win_av_relevant_match.yml

Order yaml field

2022-10-25 11:08:51 +02:00

win_builtin_remove_application.yml

Order yaml field

2022-10-25 11:08:51 +02:00

win_esent_ntdsutil_abuse_susp_location.yml

Order yaml field

2022-10-25 11:08:51 +02:00

win_esent_ntdsutil_abuse.yml

Order yaml field

2022-10-25 11:08:51 +02:00

win_msi_install_from_susp_locations.yml

fix: more fp found in testing and enhance fp metadata

2022-12-13 11:25:23 +01:00

win_msi_install_from_web.yml

Order yaml field

2022-10-25 11:08:51 +02:00

win_mssql_add_sysadmin_account.yml

Order yaml field

2022-10-25 11:08:51 +02:00

win_mssql_disable_audit_settings.yml

Order yaml field

2022-10-25 11:08:51 +02:00

win_mssql_sp_maggie.yml

Order yaml field

2022-10-25 11:08:51 +02:00

win_mssql_sp_procoption_set.yml

Order yaml field

2022-10-25 11:08:51 +02:00

win_mssql_xp_cmdshell_audit_log.yml

Order yaml field

2022-10-25 11:08:51 +02:00

win_mssql_xp_cmdshell_change.yml

Order yaml field

2022-10-25 11:08:51 +02:00

win_software_atera_rmm_agent_install.yml

Order yaml field

2022-10-25 11:08:51 +02:00

win_susp_backup_delete.yml

remove invalid tag

2022-01-19 18:23:30 +01:00

win_susp_msmpeng_crash.yml

Order yaml field

2022-10-25 11:08:51 +02:00

win_vul_cve_2020_0688.yml

Order yaml field

2022-10-25 11:08:51 +02:00

win_vul_cve_2021_41379.yml

Order yaml field

2022-10-25 11:08:51 +02:00

win_werfault_susp_lsass_credential_dump.yml

feat: update Lsass-Shtinkering rules

2022-12-09 12:22:50 +01:00