Florian Roth 59e5b3b999 Sysmon: Named Pipe detection for APT malware

2017-11-06 14:24:42 +01:00

..

builtin

Converted Windows 4688-only rules into 4688 and Sysmon/1 collections

2017-11-01 22:12:14 +01:00

malware

Converted Windows 4688-only rules into 4688 and Sysmon/1 collections

2017-11-01 22:12:14 +01:00

other

Added field names to first rules

2017-09-12 23:54:04 +02:00

powershell

Fixed the fixed PSAttack rule

2017-10-19 09:52:40 +02:00

sysmon

Sysmon: Named Pipe detection for APT malware

2017-11-06 14:24:42 +01:00