Florian Roth 32a17342b4 Update rules/windows/process_creation/proc_creation_win_rar_susp_greedy.yml ...

Co-authored-by: Nasreddine Bencherchali <8741929+nasbench@users.noreply.github.com>

2022-12-27 15:46:37 +01:00

..

builtin

fix: exclude teamviewer fp & reduce severity

2022-12-23 20:50:38 +01:00

create_remote_thread

feat: filename test enhancements (#3812)

2022-12-23 09:25:16 +01:00

create_stream_hash

Merge pull request #3757 from SigmaHQ/aurora-false-positive-fixing

2022-12-05 18:54:31 +01:00

dns_query

feat: new rules related to rat software based on #2841

2022-12-23 20:42:51 +01:00

driver_load

feat: filename test enhancements (#3812)

2022-12-23 09:25:16 +01:00

file

Merge branch 'SigmaHQ:master' into nasbench-rule-devel

2022-12-20 22:24:56 +01:00

image_load

fix: rename files to fit logic

2022-12-19 19:28:23 +01:00

network_connection

fix: remove unnecessary definition

2022-12-18 15:24:58 +01:00

pipe_created

refactor: remove unnesessary escape.

2022-12-03 21:56:00 +09:00

powershell

Merge pull request #3815 from nasbench/aadinternals-rules

2022-12-23 20:20:07 +01:00

process_access

feat: filename test enhancements (#3812)

2022-12-23 09:25:16 +01:00

process_creation

Update rules/windows/process_creation/proc_creation_win_rar_susp_greedy.yml

2022-12-27 15:46:37 +01:00

raw_access_thread

feat: enhance duplicate test (#3736)

2022-11-29 13:47:09 +01:00

registry

feat: filename test enhancements (#3812)

2022-12-23 09:25:16 +01:00

sysmon

Refractor (#3794)

2022-12-18 21:00:14 +01:00

wmi_event

Order yaml field

2022-10-25 12:00:56 +02:00