Sherif Eldeeb 2d22a3fe02 Add detection for recent Mimikatz versions ...

GrantedAccess is 0x1010 not 0x1410 in recent versions of mimikatz.
This modification should address both

2019-06-12 12:13:31 +03:00

..

builtin

Rule: Scanner PoC for CVE-2019-0708 RDP RCE vuln

2019-06-02 09:52:18 +02:00

malware

Update win_mal_ursnif.yml

2019-04-14 11:51:13 -05:00

other

Converted to use the new process_creation data source

2019-03-09 20:57:59 +03:00

powershell

Added missing tags and some minor improvements

2019-03-05 23:25:49 +01:00

process_creation

Converted rule to generic log source

2019-06-11 13:20:15 +02:00

sysmon

Add detection for recent Mimikatz versions

2019-06-12 12:13:31 +03:00