Florian Roth 48aeae8ca9 Merge pull request #2631 from JSHOX1/patch-1 ...

Create win_susp_ntlm_brute_force.yml

2022-02-04 00:49:27 +01:00

..

application

Update win_av_relevant_match.yml

2022-02-03 21:43:42 +01:00

applocker

move to builtin

2022-01-21 11:59:13 +01:00

code_integrity

move to builtin

2022-01-21 11:59:13 +01:00

dns_server

move to builtin

2022-01-21 11:59:13 +01:00

driverframeworks

move to builtin

2022-01-21 11:59:13 +01:00

ldap

move to builtin

2022-01-21 11:59:13 +01:00

msexchange

fix: unescaped double back slashes

2022-02-01 15:57:15 +01:00

ntlm

Update win_susp_ntlm_brute_force.yml

2022-02-03 22:02:33 +01:00

printservice

move to builtin

2022-01-21 11:59:13 +01:00

security

refactor: more regex avoidance

2022-02-03 20:05:10 +01:00

servicebus

move to builtin

2022-01-21 11:59:13 +01:00

smbclient

move to builtin

2022-01-21 11:59:13 +01:00

system

Merge pull request #2635 from SigmaHQ/rule-devel

2022-02-03 21:56:58 +01:00

taskscheduler

move to builtin

2022-01-21 11:59:13 +01:00

windefend

fix: FPs found in prod environment

2022-02-02 11:03:19 +01:00

wmi

move to builtin

2022-01-21 11:59:13 +01:00

win_alert_mimikatz_keywords.yml

remove invalid tag

2022-01-19 18:23:30 +01:00