Florian Roth 5c5639cfc6 Merge branch 'rule-devel' of https://github.com/SigmaHQ/sigma into rule-devel

2022-11-17 17:34:50 +01:00

..

driver_load_mal_creddumper.yml

Order yaml field

2022-10-25 12:00:56 +02:00

driver_load_meterpreter_or_cobaltstrike_getsystem_service_installation.yml

Order yaml field

2022-10-25 12:00:56 +02:00

driver_load_powershell_script_installed_as_service.yml

Fix related

2022-10-09 17:28:05 +02:00

driver_load_process_hacker.yml

fix: list with one element

2022-11-16 20:18:30 +01:00

driver_load_susp_temp_use.yml

Order yaml field

2022-10-25 12:00:56 +02:00

driver_load_vuln_avast_anti_rootkit_driver.yml

Order yaml field

2022-10-25 12:00:56 +02:00

driver_load_vuln_dell_driver.yml

fix: hash selection with OR in Dell driver rule

2022-11-10 13:22:04 +01:00

driver_load_vuln_drivers_names.yml

Order yaml field

2022-10-25 12:00:56 +02:00

driver_load_vuln_drivers.yml

Order yaml field

2022-10-25 12:00:56 +02:00

driver_load_vuln_gigabyte_driver.yml

Order yaml field

2022-10-25 12:00:56 +02:00

driver_load_vuln_hevd_driver.yml

fix: change casing

2022-11-17 17:34:48 +01:00

driver_load_vuln_hw_driver.yml

Order yaml field

2022-10-25 12:00:56 +02:00

driver_load_vuln_lenovo_driver.yml

rule: vulnerable Lenovo driver

2022-11-10 13:21:31 +01:00

driver_load_vuln_winring0_driver.yml

rule: proc hacker, system informer driver load; refactor: imphash casing

2022-11-16 18:12:23 +01:00

driver_load_windivert.yml

rule: proc hacker, system informer driver load; refactor: imphash casing

2022-11-16 18:12:23 +01:00