frack113 58a732e4b6 Update rules/windows/file/file_event/file_event_win_net_cli_artefact.yml ...

Co-authored-by: Nasreddine Bencherchali <8741929+nasbench@users.noreply.github.com>

2022-11-18 15:42:37 +01:00

..

builtin

fix: update rules to not use regex

2022-11-18 11:16:13 +01:00

create_remote_thread

Order yaml field

2022-10-25 12:00:56 +02:00

create_stream_hash

Add browsers

2022-10-31 20:57:22 +01:00

dns_query

Rule Dev

2022-11-18 11:15:28 +01:00

driver_load

fix: hash selection with OR in Dell driver rule

2022-11-10 13:22:04 +01:00

file

Update rules/windows/file/file_event/file_event_win_net_cli_artefact.yml

2022-11-18 15:42:37 +01:00

image_load

Update image_load_susp_python_image_load.yml

2022-11-08 17:33:45 +01:00

network_connection

Merge pull request #3670 from nasbench/fix-false-positives

2022-11-04 17:56:32 +01:00

pipe_created

Update PR

2022-11-03 10:57:56 -04:00

powershell

fix: update rules to not use regex

2022-11-18 11:16:13 +01:00

process_access

fix: deprecate 5f113a8f-8b61-41ca-b90f-d374fa7e4a39

2022-11-15 22:56:51 +01:00

process_creation

Add proc_creation_win_susp_powercfg

2022-11-18 11:26:04 +01:00

raw_access_thread

Update raw_access_thread_disk_access_using_illegitimate_tools.yml

2022-11-08 19:10:05 +01:00

registry

.NET CLR Usage Log

2022-11-18 13:24:58 +01:00

sysmon

Order yaml field

2022-10-25 12:00:56 +02:00

wmi_event

Order yaml field

2022-10-25 12:00:56 +02:00