Florian Roth 37cea85072 Rundll32.exe suspicious network connections

2017-11-04 14:44:30 +01:00

..

builtin

Converted Windows 4688-only rules into 4688 and Sysmon/1 collections

2017-11-01 22:12:14 +01:00

malware

Converted Windows 4688-only rules into 4688 and Sysmon/1 collections

2017-11-01 22:12:14 +01:00

other

Added field names to first rules

2017-09-12 23:54:04 +02:00

powershell

Fixed the fixed PSAttack rule

2017-10-19 09:52:40 +02:00

sysmon

Rundll32.exe suspicious network connections

2017-11-04 14:44:30 +01:00