Yamato Security 3a4d447d1e update pw spraying via explicit creds rules

2023-01-27 10:51:43 +09:00

..

builtin

update pw spraying via explicit creds rules

2023-01-27 10:51:43 +09:00

create_remote_thread

Promotion rules (#3821)

2022-12-27 12:29:10 +01:00

create_stream_hash

feat: update sharing websites

2023-01-19 22:07:31 +01:00

dns_query

feat: new rules and updates

2023-01-17 01:00:44 +01:00

driver_load

fix: remove duplicate entries

2023-01-11 16:34:03 +01:00

file

Revert "Change status of old rules"

2023-01-26 19:37:18 +01:00

image_load

Revert "Change status of old rules"

2023-01-26 19:37:18 +01:00

network_connection

Revert "Change status of old rules"

2023-01-26 19:37:18 +01:00

pipe_created

fix: remove unneeded double backslash escape (#3844)

2022-12-31 08:32:46 +01:00

powershell

Revert "Change status of old rules"

2023-01-26 19:37:18 +01:00

process_access

fix: fp with lsass access rule

2023-01-25 13:08:20 +01:00

process_creation

Revert "Change status of old rules"

2023-01-26 19:37:18 +01:00

raw_access_thread

fix: more fp found in testing

2023-01-18 20:16:34 +01:00

registry

Revert "Change status of old rules"

2023-01-26 19:37:18 +01:00

sysmon

Revert "Change status of old rules"

2023-01-26 19:37:18 +01:00

wmi_event

Order yaml field

2022-10-25 12:00:56 +02:00