yugoslavskiy 69a99bc2c3 Merge pull request #493 from alx1m1k/oscd ...

[OSCD] rules from Jet CSIRT team

2019-11-10 23:11:24 +03:00

..

builtin

add tieto dns exfil rules

2019-11-10 20:27:21 +03:00

malware

rules: AV rules updated to reflect 1.7.2 auf AV cheat sheet

2019-10-04 16:17:34 +02:00

other

fix: more FP reductions

2019-11-09 23:36:29 +01:00

powershell

add tieto dns exfil rules

2019-11-10 20:27:21 +03:00

process_creation

fix logsource for remote_powershell_session_process.yml

2019-11-10 23:10:24 +03:00

sysmon

Merge pull request #493 from alx1m1k/oscd

2019-11-10 23:11:24 +03:00