Florian Roth 2e32e1bb43 Rule: User account added to local Administrators

2017-03-14 12:51:50 +01:00

..

builtin

Rule: User account added to local Administrators

2017-03-14 12:51:50 +01:00

powershell

Sysmon as 'service' of product 'windows'

2017-03-13 09:23:08 +01:00

sysmon

Rule: Suspicious executions in web folders / non-exe folders

2017-03-13 23:56:06 +01:00