Florian Roth e6e0ffbdce Merge PR #4674 from @Neo23x0 - Increase hack tool coverage ...

update: Hacktool Execution - Imphash - Add additional imphash values to increase coverage
update: Findstr Launching .lnk File - Increase coverage by adding cases where the commandline ends with a double or a single quote.
---------

Co-authored-by: Nasreddine Bencherchali <8741929+nasbench@users.noreply.github.com>
Co-authored-by: phantinuss <79651203+phantinuss@users.noreply.github.com>

2024-01-15 15:24:03 +01:00

..

create_stream_hash_ads_executable.yml

feat: new rules, updates and goofy guineapig stuff (#4229)

2023-05-15 15:53:39 +02:00

create_stream_hash_creation_internet_file.yml

Merge PR #4482 From @nasbench - Add New Automation Workflows

2023-10-18 11:53:44 +02:00

create_stream_hash_file_sharing_domains_download_susp_extension.yml

feat: update cl diag script rules

2023-08-17 19:26:21 +02:00

create_stream_hash_file_sharing_domains_download_unusual_extension.yml

feat: update rules using file sharing domains

2023-08-17 13:39:59 +02:00

create_stream_hash_hktl_generic_download.yml

Merge PR #4674 from @Neo23x0 - Increase hack tool coverage

2024-01-15 15:24:03 +01:00

create_stream_hash_regedit_export_to_ads.yml

Order yaml field

2022-10-25 12:00:56 +02:00

create_stream_hash_susp_ip_domains.yml

chore: promote older rules status from experimental to test (#4651)

2024-01-01 09:00:51 +01:00

create_stream_hash_winget_susp_package_source.yml

feat: more winget updates

2023-04-18 03:35:42 +02:00

create_stream_hash_zip_tld_download.yml

feat: add more extensions and fix metadata

2023-05-18 22:55:18 +02:00