Adrien Vergé 44f18db80d Fix YAML errors reported by yamllint ...

Especially the config for ArcSight, that was invalid:

    tools/config/arcsight.yml
      89:5      error    duplication of key "product" in mapping  (key-duplicates)
      90:5      error    duplication of key "conditions" in mapping  (key-duplicates)

    rules/windows/builtin/win_susp_commands_recon_activity.yml
      10:9      error    too many spaces after colon  (colons)

2019-01-10 09:51:39 +01:00

..

builtin

Fix YAML errors reported by yamllint

2019-01-10 09:51:39 +01:00

malware

Bugfix: wrong field for 4688 process creation events

2018-12-11 16:10:15 +01:00

other

Tagged windows powershell, other and malware rules.

2018-07-24 10:56:41 +02:00

powershell

Update powershell_xor_commandline.yml

2018-12-05 05:51:41 +03:00

sysmon

Corrected class B private IP range to prevent false negatives

2019-01-04 12:50:41 +03:00