securepeacock 161c8e6c2c Update proc_creation_win_lolbins_by_office_applications.yml ...

Adding msidb.exe references are below.
https://www.elastic.co/security-labs/exploring-the-ref2731-intrusion-set
https://twitter.com/andythevariable/status/1576953781581144064?s=20&t=QiJILvK4ZiBdR8RJe24u-A

2022-10-03 11:56:06 -04:00

..

application

Update Ref+Selection 3

2022-07-11 18:12:51 +01:00

apt

remove invalid tag

2022-01-19 18:23:30 +01:00

cloud

Create microsoft365_pst_export_alert.yml (#2665)

2022-09-19 13:19:55 +02:00

compliance

Update selections and indentation

2022-07-07 20:13:45 +01:00

linux

fix: Rename Linux process creation rule to use established pattern

2022-09-22 17:42:54 +01:00

macos

Quick update

2022-09-16 09:29:45 +02:00

network

Added quotes to strings

2022-09-01 15:22:26 +02:00

proxy

antSword webshell

2022-09-29 13:31:16 +02:00

web

Update meta info

2022-09-13 22:14:45 +02:00

windows

Update proc_creation_win_lolbins_by_office_applications.yml

2022-10-03 11:56:06 -04:00