Florian Roth 0db7f7f7cc rule: SysmonEOP

2022-12-04 14:36:04 +01:00

..

builtin

Update Title (#3733)

2022-11-28 06:43:17 +01:00

create_remote_thread

Order yaml field

2022-10-25 12:00:56 +02:00

create_stream_hash

rule: modified date update, PPLKiller

2022-11-12 09:27:41 +01:00

dns_query

Update title (#3734)

2022-11-29 07:36:45 +01:00

driver_load

chore: change modified date

2022-11-19 08:48:43 +01:00

file

fix: some rules using ??? placeholders

2022-11-29 10:31:18 +01:00

image_load

Update title (#3734)

2022-11-29 07:36:45 +01:00

network_connection

feat: general fixes

2022-11-22 01:22:36 +01:00

pipe_created

Update PR

2022-11-03 10:57:56 -04:00

powershell

Update Title (#3733)

2022-11-28 06:43:17 +01:00

process_access

fix: deprecate 5f113a8f-8b61-41ca-b90f-d374fa7e4a39

2022-11-15 22:56:51 +01:00

process_creation

rule: SysmonEOP

2022-12-04 14:36:04 +01:00

raw_access_thread

Update raw_access_thread_disk_access_using_illegitimate_tools.yml

2022-11-08 19:10:05 +01:00

registry

refactor: rule with ??? causing issues in some backends

2022-12-01 14:02:15 +01:00

sysmon

Update Title (#3731)

2022-11-27 19:19:27 +01:00

wmi_event

Order yaml field

2022-10-25 12:00:56 +02:00