Swachchhanda Shrawan Poudel
4355ece230
remove: Active Directory Kerberos DLL Loaded Via Office Application - deprecated as it triggers on normal activity fix: Scheduled Task Creation Via Schtasks.EXE - add for for msoffice application fix: Use Short Name Path in Command Line - add filter for dotnet csc.exe fix: Potential Product Reconnaissance Via Wmic.EXE - add filter for some product related operation through wmic fix: WMIC Remote Command Execution - fix broken FP filter fix: Classes Autorun Keys Modification - filter null details fix: CurrentVersion Autorun Keys Modification - filter null details fix: Modification of IE Registry Settings - filter null details fix: Potential Persistence Via Shim Database Modification - filter null details fix: Scheduled TaskCache Change by Uncommon Program - filter null details update: Copy From Or To Admin Share Or Sysvol Folder - some logic change --------- Co-authored-by: frack113 <62423083+frack113@users.noreply.github.com>
TBD