Florian Roth 5d1cf4b9de Merge PR #5076 from @Neo23x0 - Fix Suspicious SYSTEM User Process Creation ...

fix: Suspicious SYSTEM User Process Creation - filter false positives with Google Updater uninstall script

2024-11-13 23:21:16 +01:00

..

builtin

Merge PR #5065 from @nasbench - Promote older rules status from experimental to test

2024-11-01 10:21:04 +01:00

create_remote_thread

Merge PR #5027 from @nasbench - Promote older rules status from experimental to test

2024-10-01 14:56:09 +02:00

create_stream_hash

Merge PR #5065 from @nasbench - Promote older rules status from experimental to test

2024-11-01 10:21:04 +01:00

dns_query

Merge PR #5065 from @nasbench - Promote older rules status from experimental to test

2024-11-01 10:21:04 +01:00

driver_load

Merge PR #5027 from @nasbench - Promote older rules status from experimental to test

2024-10-01 14:56:09 +02:00

file

Merge PR #5070 from @Neo23x0 - Update .RDP File Created by Outlook Process

2024-11-04 11:25:05 +01:00

image_load

Merge PR #5031 from @swachchhanda000 - Add Potential Python DLL SideLoading

2024-10-06 22:51:09 +02:00

network_connection

Merge PR #5065 from @nasbench - Promote older rules status from experimental to test

2024-11-01 10:21:04 +01:00

pipe_created

Merge PR #5065 from @nasbench - Promote older rules status from experimental to test

2024-11-01 10:21:04 +01:00

powershell

Merge PR #5065 from @nasbench - Promote older rules status from experimental to test

2024-11-01 10:21:04 +01:00

process_access

Merge PR #5065 from @nasbench - Promote older rules status from experimental to test

2024-11-01 10:21:04 +01:00

process_creation

Merge PR #5076 from @Neo23x0 - Fix Suspicious SYSTEM User Process Creation

2024-11-13 23:21:16 +01:00

process_tampering

Merge PR #5027 from @nasbench - Promote older rules status from experimental to test

2024-10-01 14:56:09 +02:00

raw_access_thread

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

registry

Merge PR #5067 from @nasbench - Add missing reference links

2024-11-01 20:52:27 +01:00

sysmon

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

wmi_event

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00