Florian Roth 0b4bfad074 Merge branch 'master' into aurora-false-positive-fixing

2022-03-29 21:06:30 +02:00

..

registry_set_abusing_windows_telemetry_for_persistence.yml

Categorie registry_set

2022-03-26 10:55:05 +01:00

registry_set_add_port_monitor.yml

fix date

2022-03-26 11:39:32 +01:00

registry_set_asep_reg_keys_modification_classes.yml

Catagorie registry add delete

2022-03-26 11:21:53 +01:00

registry_set_asep_reg_keys_modification_common.yml

Categorie registry_set

2022-03-26 10:55:05 +01:00

registry_set_asep_reg_keys_modification_currentcontrolset.yml

Categorie registry_set

2022-03-26 10:55:05 +01:00

registry_set_asep_reg_keys_modification_currentversion_nt.yml

Categorie registry_set

2022-03-26 10:55:05 +01:00

registry_set_asep_reg_keys_modification_currentversion.yml

Categorie registry_set

2022-03-26 10:55:05 +01:00

registry_set_asep_reg_keys_modification_internet_explorer.yml

Categorie registry_set

2022-03-26 10:55:05 +01:00

registry_set_asep_reg_keys_modification_office.yml

Categorie registry_set

2022-03-26 10:55:05 +01:00

registry_set_asep_reg_keys_modification_session_manager.yml

Categorie registry_set

2022-03-26 10:55:05 +01:00

registry_set_asep_reg_keys_modification_system_scripts.yml

Categorie registry_set

2022-03-26 10:55:05 +01:00

registry_set_asep_reg_keys_modification_winsock2.yml

Categorie registry_set

2022-03-26 10:55:05 +01:00

registry_set_asep_reg_keys_modification_wow6432node_classes.yml

Categorie registry_set

2022-03-26 10:55:05 +01:00

registry_set_asep_reg_keys_modification_wow6432node_currentversion.yml

Categorie registry_set

2022-03-26 10:55:05 +01:00

registry_set_asep_reg_keys_modification_wow6432node.yml

Categorie registry_set

2022-03-26 10:55:05 +01:00

registry_set_blackbyte_ransomware.yml

Categorie registry_set

2022-03-26 10:55:05 +01:00

registry_set_bypass_uac_using_delegateexecute.yml

Categorie registry_set

2022-03-26 10:55:05 +01:00

registry_set_bypass_uac_using_eventviewer.yml

Categorie registry_set

2022-03-26 10:55:05 +01:00

registry_set_bypass_uac_using_silentcleanup_task.yml

Categorie registry_set

2022-03-26 10:55:05 +01:00

registry_set_change_rdp_port.yml

Categorie registry_set

2022-03-26 10:55:05 +01:00

registry_set_change_security_zones.yml

Categorie registry_set

2022-03-26 10:55:05 +01:00

registry_set_chrome_extension.yml

Categorie registry_set

2022-03-26 10:55:05 +01:00

registry_set_cobaltstrike_service_installs.yml

Categorie registry_set

2022-03-26 10:55:05 +01:00

registry_set_comhijack_sdclt.yml

Update logsource

2022-03-26 16:57:58 +01:00

registry_set_cve_2020_1048_new_printer_port.yml

Update logsource

2022-03-26 16:57:58 +01:00

registry_set_defender_disabled.yml

Categorie registry_set

2022-03-26 10:55:05 +01:00

registry_set_defender_exclusions.yml

Categorie registry_set

2022-03-26 10:55:05 +01:00

registry_set_defender_realtime_protection_disabled.yml

Categorie registry_set

2022-03-26 10:55:05 +01:00

registry_set_dhcp_calloutdll.yml

Update logsource

2022-03-26 16:57:58 +01:00

registry_set_disable_administrative_share.yml

Categorie registry_set

2022-03-26 10:55:05 +01:00

registry_set_disable_defender_firewall.yml

Categorie registry_set

2022-03-26 10:55:05 +01:00

registry_set_disable_fonction_user.yml

Categorie registry_set

2022-03-26 10:55:05 +01:00

registry_set_disable_microsoft_office_security_features.yml

Categorie registry_set

2022-03-26 10:55:05 +01:00

registry_set_disable_uac_registry.yml

Categorie registry_set

2022-03-26 10:55:05 +01:00

registry_set_disabled_exploit_guard_net_protection_on_ms_defender.yml

Categorie registry_set

2022-03-26 10:55:05 +01:00

registry_set_disabled_pua_protection_on_microsoft_defender.yml

Categorie registry_set

2022-03-26 10:55:05 +01:00

registry_set_disabled_tamper_protection_on_microsoft_defender.yml

Categorie registry_set

2022-03-26 10:55:05 +01:00

registry_set_dns_over_https_enabled.yml

Categorie registry_set

2022-03-26 10:55:05 +01:00

registry_set_enabling_cor_profiler_env_variables.yml

Update logsource

2022-03-26 16:57:58 +01:00

registry_set_etw_disabled.yml

Categorie registry_set

2022-03-26 10:55:05 +01:00

registry_set_file_association_exefile.yml

Categorie registry_set

2022-03-26 10:55:05 +01:00

registry_set_globalflags_persistence.yml

Update logsource

2022-03-26 16:57:58 +01:00

registry_set_hidden_extention.yml

Categorie registry_set

2022-03-26 10:55:05 +01:00

registry_set_hide_fonction_user.yml

Categorie registry_set

2022-03-26 10:55:05 +01:00

registry_set_ie_persistence.yml

Merge branch 'master' into aurora-false-positive-fixing

2022-03-29 21:06:30 +02:00

registry_set_mal_adwind.yml

fix date

2022-03-26 11:39:32 +01:00

registry_set_mal_blue_mockingbird.yml

Update logsource

2022-03-26 16:57:58 +01:00

registry_set_new_application_appcompat.yml

Update logsource

2022-03-26 16:57:58 +01:00

registry_set_office_enable_dde.yml

Categorie registry_set

2022-03-26 10:55:05 +01:00

registry_set_office_security.yml

Update logsource

2022-03-26 16:57:58 +01:00

registry_set_office_vsto_persistence.yml

Categorie registry_set

2022-03-26 10:55:05 +01:00

registry_set_outlook_c2_registry_key.yml

Categorie registry_set

2022-03-26 10:55:05 +01:00

registry_set_outlook_registry_todaypage.yml

Categorie registry_set

2022-03-26 10:55:05 +01:00

registry_set_outlook_registry_webview.yml

Update logsource

2022-03-26 16:57:58 +01:00

registry_set_outlook_security.yml

Categorie registry_set

2022-03-26 10:55:05 +01:00

registry_set_persistence_search_order.yml

Categorie registry_set

2022-03-26 10:55:05 +01:00

registry_set_powershell_as_service.yml

Categorie registry_set

2022-03-26 10:55:05 +01:00

registry_set_powershell_in_run_keys.yml

Categorie registry_set

2022-03-26 10:55:05 +01:00

registry_set_rdp_registry_modification.yml

Categorie registry_set

2022-03-26 10:55:05 +01:00

registry_set_rdp_settings_hijack.yml

Update logsource

2022-03-26 16:57:58 +01:00

registry_set_set_nopolicies_user.yml

Categorie registry_set

2022-03-26 10:55:05 +01:00

registry_set_set_servicedll.yml

Categorie registry_set

2022-03-26 10:55:05 +01:00

registry_set_shim_databases_persistence.yml

Categorie registry_set

2022-03-26 10:55:05 +01:00

registry_set_silentprocessexit.yml

Categorie registry_set

2022-03-26 10:55:05 +01:00

registry_set_susp_printer_driver.yml

Categorie registry_set

2022-03-26 10:55:05 +01:00

registry_set_susp_reg_persist_explorer_run.yml

Categorie registry_set

2022-03-26 10:55:05 +01:00

registry_set_susp_run_key_img_folder.yml

Categorie registry_set

2022-03-26 10:55:05 +01:00

registry_set_susp_service_installed.yml

Categorie registry_set

2022-03-26 10:55:05 +01:00

registry_set_suspicious_keyboard_layout_load.yml

Categorie registry_set

2022-03-26 10:55:05 +01:00

registry_set_taskcache_entry.yml

Categorie registry_set

2022-03-26 10:55:05 +01:00

registry_set_telemetry_persistence.yml

Categorie registry_set

2022-03-26 10:55:05 +01:00

registry_set_uac_bypass_eventvwr.yml

Update logsource

2022-03-26 16:57:58 +01:00

registry_set_uac_bypass_sdclt.yml

Update logsource

2022-03-26 16:57:58 +01:00

registry_set_uac_bypass_winsat.yml

Categorie registry_set

2022-03-26 10:55:05 +01:00

registry_set_uac_bypass_wmp.yml

Categorie registry_set

2022-03-26 10:55:05 +01:00

registry_set_vbs_payload_stored.yml

Categorie registry_set

2022-03-26 10:55:05 +01:00

registry_set_wab_dllpath_reg_change.yml

Categorie registry_set

2022-03-26 10:55:05 +01:00

registry_set_wdigest_enable_uselogoncredential.yml

Categorie registry_set

2022-03-26 10:55:05 +01:00

registry_set_winlogon_notify_key.yml

Categorie registry_set

2022-03-26 10:55:05 +01:00