ecco 4c54e8322a sysmon eventid 3: filter on outgoing connections (initiated: true) to avoid false positives

2019-09-25 11:11:22 -04:00

..

application

Fixes for Elasticsearch query correctness CI tests

2018-04-09 22:33:29 +02:00

apt

rule: emissary panda activity

2019-09-03 15:35:33 +02:00

compliance

Added level

2019-08-05 19:51:22 +02:00

linux

fix: linux cmds rule

2019-07-02 15:22:26 +02:00

network

Merge pull request #315 from P4T12ICK/feature/net_dnc_c2_detection

2019-05-10 00:12:39 +02:00

proxy

rule: proxy ua unknown zero day implant

2019-09-24 18:24:48 +02:00

web

Web Source Code Enumeration via .git

2019-06-08 22:40:28 -04:00

windows

sysmon eventid 3: filter on outgoing connections (initiated: true) to avoid false positives

2019-09-25 11:11:22 -04:00