memory-shards 562d29c432 Create proc_creation_win_lolbin_agentexecutor.yml ...

Proposed rule for lolbin AgentExecutor that doesn't have much coverage. Rule created as final project for Detection Engineering with Sigma course final project.

2022-07-31 12:46:52 -04:00

..

application

Update Ref+Selection 3

2022-07-11 18:12:51 +01:00

apt

remove invalid tag

2022-01-19 18:23:30 +01:00

cloud

Azure AD SecOps Guide

2022-07-29 19:27:31 +02:00

compliance

Update selections and indentation

2022-07-07 20:13:45 +01:00

linux

new rules: lnx susp shell exec

2022-07-26 16:40:12 +02:00

macos

Fix review

2022-07-11 20:27:42 +01:00

network

Update Ref+Selection 3

2022-07-11 18:12:51 +01:00

proxy

some rule improvements

2022-07-21 18:16:22 +02:00

web

fix: too many FPs

2022-07-27 14:18:29 +02:00

windows

Create proc_creation_win_lolbin_agentexecutor.yml

2022-07-31 12:46:52 -04:00