svch0stz 3ec531979a Update proc_creation_win_webshell_spawn.yml ...

Example pulled from manage engine below:

Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
ParentImage: C:\Program Files\ManageEngine\SupportCenterPlus\jre\bin\java.exe
ParentCommandline: "..\jre\bin\java" -Dcatalina.home=.. -Dserver.home=.. -Dserver.stats=1000  <snip>

2022-05-15 14:57:21 +10:00

..

application

fix: several issues

2022-05-12 17:30:30 +02:00

apt

remove invalid tag

2022-01-19 18:23:30 +01:00

cloud

chore: test rules: reactivate single value list check

2022-05-10 17:13:04 +02:00

compliance

chore: test rules: reactivate single value list check

2022-05-10 17:13:04 +02:00

linux

chore: test rules: reactivate single value list check

2022-05-10 17:13:04 +02:00

macos

chore: test rules: reactivate single value list check

2022-05-10 17:13:04 +02:00

network

Merge pull request #3001 from redsand/fp_zeek_add_ip6_non_routable

2022-05-11 16:48:23 +02:00

proxy

Merge pull request #2998 from redsand/spotify_co_for_bits_admin

2022-05-12 13:02:48 +02:00

web

chore: test rules: reactivate single value list check

2022-05-10 17:13:04 +02:00

windows

Update proc_creation_win_webshell_spawn.yml

2022-05-15 14:57:21 +10:00