Roberto Rodriguez 87ce07088f Update sysmon_plugx_susp_exe_locations.yml ...

Duplicate rule title: https://github.com/Neo23x0/sigma/search?q=Executable+used+by+PlugX+in+Uncommon+Location&unscoped_q=Executable+used+by+PlugX+in+Uncommon+Location

This impats Elastalert integration since you cannot have two rules with the same name

2018-12-05 07:58:13 +03:00

..

builtin

Update win_susp_commands_recon_activity.yml

2018-12-05 05:55:36 +03:00

malware

Update av_relevant_files.yml

2018-12-05 07:53:53 +03:00

other

Tagged windows powershell, other and malware rules.

2018-07-24 10:56:41 +02:00

powershell

Update powershell_xor_commandline.yml

2018-12-05 05:51:41 +03:00

sysmon

Update sysmon_plugx_susp_exe_locations.yml

2018-12-05 07:58:13 +03:00