sai prashanth pulisetti 568f1aef33 Merge PR #4878 from @prashanthpulisetti - Update "Create Remote Thread" based rules ...

update: Rare Remote Thread Creation By Uncommon Source Image - Add dialer.exe
update: Remote Thread Creation By Uncommon Source Image - Update filters
update: Remote Thread Creation In Uncommon Target Image - Update filters 

---------

Co-authored-by: nasbench <8741929+nasbench@users.noreply.github.com>

2024-07-15 15:26:33 +02:00

..

create_remote_thread_win_hktl_cactustorch.yml

feat: more updates

2023-05-05 17:52:47 +02:00

create_remote_thread_win_hktl_cobaltstrike.yml

feat: more updates

2023-05-05 17:52:47 +02:00

create_remote_thread_win_keepass.yml

Merge PR #4745 from @nasbench - Promote older rules status from experimental to test

2024-03-01 15:38:35 +01:00

create_remote_thread_win_mstsc_susp_location.yml

Merge PR #4684 from @phantinuss - Multiple FP fixes & rule updates

2024-01-23 12:15:04 +01:00

create_remote_thread_win_powershell_lsass.yml

Merge PR #4479 From @frack113 - Upgrade Rules Status

2023-10-17 14:35:26 +02:00

create_remote_thread_win_powershell_susp_targets.yml

Merge PR #4684 from @phantinuss - Multiple FP fixes & rule updates

2024-01-23 12:15:04 +01:00

create_remote_thread_win_susp_password_dumper_lsass.yml

Merge PR #4684 from @phantinuss - Multiple FP fixes & rule updates

2024-01-23 12:15:04 +01:00

create_remote_thread_win_susp_relevant_source_image.yml

Merge PR #4878 from @prashanthpulisetti - Update "Create Remote Thread" based rules

2024-07-15 15:26:33 +02:00

create_remote_thread_win_susp_uncommon_source_image.yml

Merge PR #4878 from @prashanthpulisetti - Update "Create Remote Thread" based rules

2024-07-15 15:26:33 +02:00

create_remote_thread_win_susp_uncommon_target_image.yml

Merge PR #4878 from @prashanthpulisetti - Update "Create Remote Thread" based rules

2024-07-15 15:26:33 +02:00

create_remote_thread_win_ttdinjec.yml

Merge PR #4479 From @frack113 - Upgrade Rules Status

2023-10-17 14:35:26 +02:00