Sander Wiebing b8ee736f44 Remove AppData folder as suspicious folder ...

A lot of software is using the AppData folder for startup keys. Some examples:
- Microsoft Teams (\AppData\Local\Microsoft\Teams)
- Resilio (\AppData\Roaming\Resilio Sync\)
- Discord ( (\AppData\Local\Discord\)
- Spotify ( (\AppData\Roaming\Spotify\)

Too many to whitelist them all

2020-05-24 15:16:07 +02:00

..

application

fix: fixed casing and long rule titles

2020-01-30 17:26:09 +01:00

apt

fix: removed rules missing in master

2020-05-14 15:53:09 +02:00

cloud

capitalized titles

2020-05-05 11:32:18 +01:00

compliance

Added UUIDs to rules

2019-11-12 23:12:27 +01:00

generic

OSCD QA wave 3

2020-02-02 12:41:12 +01:00

linux

Merge pull request #772 from gamma37/suspicious_activities

2020-05-23 18:11:32 +02:00

network

small T, big T

2020-05-19 05:13:48 -04:00

proxy

rule: Strong Pity loader UA

2020-05-23 17:38:10 +02:00

web

use the taxonomy for http response which is sc-status

2020-03-14 15:02:33 -04:00

windows

Remove AppData folder as suspicious folder

2020-05-24 15:16:07 +02:00