Florian Roth 604d88cf1e Rule: WMI Event Subscription

2019-01-12 12:03:36 +01:00

..

builtin

Fixed the RC section to use rc.exe instead of oleview.exe

2019-01-01 13:30:26 +03:00

malware

Rule: Dridex pattern

2019-01-12 12:03:36 +01:00

other

Tagged windows powershell, other and malware rules.

2018-07-24 10:56:41 +02:00

powershell

Update powershell_xor_commandline.yml

2018-12-05 05:51:41 +03:00

sysmon

Rule: WMI Event Subscription

2019-01-12 12:03:36 +01:00