Florian Roth 5de3cd71a4 Merge pull request #149 from yt0ng/development ...

Detects Request to amsiInitFailed that can be used to disable AMSI Scanning

2018-08-22 17:19:10 +02:00

..

builtin

Update win_susp_commands_recon_activity.yml

2018-08-22 17:00:00 +02:00

malware

fix: Bugfix in Adwind rule

2018-08-15 12:33:03 +02:00

other

Tagged windows powershell, other and malware rules.

2018-07-24 10:56:41 +02:00

powershell

Added quotation marks

2018-07-26 18:10:21 +02:00

sysmon

fix: Added Event ID in second selection

2018-08-22 17:03:13 +02:00