GtUGtHGtNDtEUaE 782f0f524e Merge PR #4945 from @GtUGtHGtNDtEUaE - Fix typo in field name for rules leveraging EID 5145 ...

fix: Remote Task Creation via ATSVC Named Pipe - Fixed field name from `Accesses` to `AccessList`
fix: Persistence and Execution at Scale via GPO Scheduled Task - Fixed field name from `Accesses` to `AccessList`
fix: Remote Service Activity via SVCCTL Named Pipe - Fixed field name from `Accesses` to `AccessList`

2024-08-01 22:46:23 +02:00

..

application

Merge PR #4917 from @Neo23x0 - Update antivirus related rules

2024-07-17 16:35:51 +02:00

applocker

Merge PR #4893 from @ryanplasma - Update Microsoft references URLS

2024-07-02 12:00:11 +02:00

appmodel_runtime

Merge PR #4942 from @nasbench - promote older rules status from experimental to test

2024-08-01 10:26:14 +02:00

appxdeployment_server

Merge PR #4702 from @nasbench - Rule tuning and updates

2024-02-12 12:29:36 +01:00

appxpackaging_om

Merge PR #4611 from @nasbench - Promote Older Rules Status From experimental To test

2023-12-01 12:50:36 +01:00

bits_client

Merge PR #4702 from @nasbench - Rule tuning and updates

2024-02-12 12:29:36 +01:00

capi2

Merge PR #4791 from @nasbench - Promote older rules status from experimental to test

2024-04-01 15:14:10 +02:00

certificate_services_client_lifecycle_system

Merge PR #4791 from @nasbench - Promote older rules status from experimental to test

2024-04-01 15:14:10 +02:00

code_integrity

Merge PR #4893 from @ryanplasma - Update Microsoft references URLS

2024-07-02 12:00:11 +02:00

diagnosis/scripted

Merge PR #4479 From @frack113 - Upgrade Rules Status

2023-10-17 14:35:26 +02:00

dns_client

Merge PR #4942 from @nasbench - promote older rules status from experimental to test

2024-08-01 10:26:14 +02:00

dns_server

Merge PR #4791 from @nasbench - Promote older rules status from experimental to test

2024-04-01 15:14:10 +02:00

driverframeworks

chore: add nextron authors tag

2023-02-01 11:14:59 +01:00

firewall_as

Merge PR #4893 from @ryanplasma - Update Microsoft references URLS

2024-07-02 12:00:11 +02:00

ldap

Merge PR #4538 from @frack113 - Add Sigma CLI Configuration File

2023-11-03 16:59:53 +01:00

lsa_server

Merge PR #4745 from @nasbench - Promote older rules status from experimental to test

2024-03-01 15:38:35 +01:00

msexchange

Merge PR #4745 from @nasbench - Promote older rules status from experimental to test

2024-03-01 15:38:35 +01:00

ntlm

Merge PR #4928 from @nasbench - Fix FPs and issues found in testing

2024-07-24 09:22:49 +02:00

openssh

Merge PR #4893 from @ryanplasma - Update Microsoft references URLS

2024-07-02 12:00:11 +02:00

security

Merge PR #4945 from @GtUGtHGtNDtEUaE - Fix typo in field name for rules leveraging EID 5145

2024-08-01 22:46:23 +02:00

security_mitigations

Merge PR #4479 From @frack113 - Upgrade Rules Status

2023-10-17 14:35:26 +02:00

servicebus

old experimental rule promotion

2022-10-09 16:54:04 +02:00

shell_core

Merge PR #4479 From @frack113 - Upgrade Rules Status

2023-10-17 14:35:26 +02:00

smbclient/security

chore: move rules to new folders (#4205)

2023-05-02 23:17:57 +02:00

system

Merge PR #4888 from @nasbench - Add multiple new rules, updates and fixes

2024-07-17 11:04:05 +02:00

taskscheduler

Merge PR #4681 from @nasbench - Add Missing Ref & Tags

2024-01-29 13:37:20 +01:00

terminalservices

Merge PR #4479 From @frack113 - Upgrade Rules Status

2023-10-17 14:35:26 +02:00

windefend

Merge PR #4893 from @ryanplasma - Update Microsoft references URLS

2024-07-02 12:00:11 +02:00

wmi

Merge PR #4482 From @nasbench - Add New Automation Workflows

2023-10-18 11:53:44 +02:00

win_alert_mimikatz_keywords.yml

chore: add nextron authors tag

2023-02-01 11:14:59 +01:00