fornotes b4efa2198a Merge PR #4933 from @fornotes - Add Remote Thread Created In Shell Application ...

new : Remote Thread Created In Shell Application 

---------

Co-authored-by: nasbench <8741929+nasbench@users.noreply.github.com>

2024-07-29 22:48:11 +02:00

..

create_remote_thread_win_hktl_cactustorch.yml

feat: more updates

2023-05-05 17:52:47 +02:00

create_remote_thread_win_hktl_cobaltstrike.yml

feat: more updates

2023-05-05 17:52:47 +02:00

create_remote_thread_win_keepass.yml

Merge PR #4745 from @nasbench - Promote older rules status from experimental to test

2024-03-01 15:38:35 +01:00

create_remote_thread_win_mstsc_susp_location.yml

Merge PR #4684 from @phantinuss - Multiple FP fixes & rule updates

2024-01-23 12:15:04 +01:00

create_remote_thread_win_powershell_lsass.yml

Merge PR #4479 From @frack113 - Upgrade Rules Status

2023-10-17 14:35:26 +02:00

create_remote_thread_win_powershell_susp_targets.yml

Merge PR #4684 from @phantinuss - Multiple FP fixes & rule updates

2024-01-23 12:15:04 +01:00

create_remote_thread_win_susp_password_dumper_lsass.yml

Merge PR #4684 from @phantinuss - Multiple FP fixes & rule updates

2024-01-23 12:15:04 +01:00

create_remote_thread_win_susp_relevant_source_image.yml

Merge PR #4878 from @prashanthpulisetti - Update "Create Remote Thread" based rules

2024-07-15 15:26:33 +02:00

create_remote_thread_win_susp_target_shell_application.yml

Merge PR #4933 from @fornotes - Add Remote Thread Created In Shell Application

2024-07-29 22:48:11 +02:00

create_remote_thread_win_susp_uncommon_source_image.yml

Merge PR #4878 from @prashanthpulisetti - Update "Create Remote Thread" based rules

2024-07-15 15:26:33 +02:00

create_remote_thread_win_susp_uncommon_target_image.yml

Merge PR #4878 from @prashanthpulisetti - Update "Create Remote Thread" based rules

2024-07-15 15:26:33 +02:00

create_remote_thread_win_ttdinjec.yml

Merge PR #4479 From @frack113 - Upgrade Rules Status

2023-10-17 14:35:26 +02:00