Nasreddine Bencherchali 2710bf4710 feat: new rules, updates and fp fixes (#4162)

2023-04-11 13:04:22 +02:00

..

proc_access_win_cmstp_execution_by_access.yml

Order yaml field

2022-10-26 09:42:26 +02:00

proc_access_win_cobaltstrike_bof_injection_pattern.yml

chore: add nextron authors tag

2023-02-01 11:14:59 +01:00

proc_access_win_cred_dump_lsass_access.yml

fix: fp found in testing

2023-03-22 20:31:33 +01:00

proc_access_win_direct_syscall_ntopenprocess.yml

fix: remove version number

2023-03-23 12:11:29 +01:00

proc_access_win_hack_sysmonente.yml

chore: add nextron authors tag

2023-02-01 11:14:59 +01:00

proc_access_win_handlekatz_lsass_access.yml

Order yaml field

2022-10-26 09:42:26 +02:00

proc_access_win_invoke_patchingapi.yml

fix: fp found in testing

2023-01-25 16:54:11 +01:00

proc_access_win_invoke_phantom.yml

feat: multiple updates and enhancements

2023-01-30 20:02:45 +01:00

proc_access_win_lazagne_cred_dump_lsass_access.yml

Order yaml field

2022-10-26 09:42:26 +02:00

proc_access_win_littlecorporal_generated_maldoc.yml

chore: add nextron authors tag

2023-02-01 11:14:59 +01:00

proc_access_win_load_undocumented_autoelevated_com_interface.yml

Order yaml field

2022-10-26 09:42:26 +02:00

proc_access_win_lsass_dump_comsvcs_dll.yml

old experimental rule promotion

2022-10-09 16:54:04 +02:00

proc_access_win_lsass_memdump_evasion.yml

chore: add nextron authors tag

2023-02-01 11:14:59 +01:00

proc_access_win_lsass_memdump_indicators.yml

chore: add nextron authors tag

2023-02-01 11:14:59 +01:00

proc_access_win_lsass_memdump.yml

Order yaml field

2022-10-26 09:42:26 +02:00

proc_access_win_lsass_werfault.yml

chore: add nextron authors tag

2023-02-01 11:14:59 +01:00

proc_access_win_malware_verclsid_shellcode.yml

chore: add nextron authors tag

2023-02-01 11:14:59 +01:00

proc_access_win_mimikatz_trough_winrm.yml

Order yaml field

2022-10-26 09:42:26 +02:00

proc_access_win_pypykatz_cred_dump_lsass_access.yml

old experimental rule promotion

2022-10-09 16:54:04 +02:00

proc_access_win_rare_proc_access_lsass.yml

feat: new rules, updates and fp fixes (#4136)

2023-04-03 12:06:14 +02:00

proc_access_win_shellcode_inject_msf_empire.yml

feat: filename test enhancements (#3812)

2022-12-23 09:25:16 +01:00

proc_access_win_susp_proc_access_lsass_susp_source.yml

feat: new rules, updates and fp fixes (#4162)

2023-04-11 13:04:22 +02:00

proc_access_win_susp_proc_access_lsass.yml

fix: fp found in testing

2023-03-22 20:31:33 +01:00

proc_access_win_susp_seclogon.yml

feat: filename test enhancements (#3812)

2022-12-23 09:25:16 +01:00

proc_access_win_svchost_cred_dump.yml

old experimental rule promotion

2022-10-09 16:54:04 +02:00

proc_access_win_uac_bypass_wow64_logger.yml

chore: add nextron authors tag

2023-02-01 11:14:59 +01:00

proc_access_win_winapi_in_powershell_credentials_dumping.yml

feat: filename test enhancements (#3812)

2022-12-23 09:25:16 +01:00