frack113 3c7fcf6bbb Merge PR #4916 from @frack113 - Move some rules to Emerging-Threats folder ...

chore: OceanLotus Registry Activity - move to emerging-threats
chore: OilRig APT Registry Persistence - move to emerging-threats
chore: Potential Ursnif Malware Activity - Registry - move to emerging-threats
chore: Leviathan Registry Key Activity - move to emerging-threats

2024-07-17 10:28:18 +02:00

..

builtin

Merge PR #4903 from @nischalkhadgi62 - Add Directory Service Restore Mode(DSRM) Registry Value Tampering

2024-07-11 23:18:19 +02:00

create_remote_thread

Merge PR #4878 from @prashanthpulisetti - Update "Create Remote Thread" based rules

2024-07-15 15:26:33 +02:00

create_stream_hash

Merge PR #4841 from @nasbench - Promote older rules status from experimental to test

2024-05-02 10:34:25 +02:00

dns_query

Update Rules (#4872)

2024-06-25 11:26:45 +02:00

driver_load

Merge PR #4791 from @nasbench - Promote older rules status from experimental to test

2024-04-01 15:14:10 +02:00

file

Merge PR #4893 from @ryanplasma - Update Microsoft references URLS

2024-07-02 12:00:11 +02:00

image_load

Merge PR #4906 from @fornotes - Update and add new dll sideloading rules

2024-07-11 12:57:37 +02:00

network_connection

Merge PR #4893 from @ryanplasma - Update Microsoft references URLS

2024-07-02 12:00:11 +02:00

pipe_created

Merge PR #4891 from @nasbench - Promote older rules status from experimental to test

2024-07-01 10:42:32 +02:00

powershell

Merge PR #4893 from @ryanplasma - Update Microsoft references URLS

2024-07-02 12:00:11 +02:00

process_access

Merge PR #4893 from @ryanplasma - Update Microsoft references URLS

2024-07-02 12:00:11 +02:00

process_creation

Merge PR #4902 from @joshnck - Add BitlockerTogo.EXE Execution

2024-07-11 20:22:59 +02:00

process_tampering

Merge PR #4597 from @nasbench - Update Process Access Rules

2023-12-04 01:14:15 +01:00

raw_access_thread

Merge PR #4597 from @nasbench - Update Process Access Rules

2023-12-04 01:14:15 +01:00

registry

Merge PR #4916 from @frack113 - Move some rules to Emerging-Threats folder

2024-07-17 10:28:18 +02:00

sysmon

Merge PR #4893 from @ryanplasma - Update Microsoft references URLS

2024-07-02 12:00:11 +02:00

wmi_event

Merge PR #4681 from @nasbench - Add Missing Ref & Tags

2024-01-29 13:37:20 +01:00