phantinuss 7f030b250e fix: wrong mapping of Windows Audit Log EventID 4688 ...

reverts some changes introduced by commit c5fa73c328
    - removes the unnecessary/wrong field mapping
    - fixes the rules to apply to CommandLine instead of
      ParentCommandLine as the author probably intended

2022-03-30 11:24:24 +02:00

..

powershell.yml

add references

2021-10-16 08:37:51 +02:00

sysmon.yml

Update registry category

2022-03-26 11:06:11 +01:00

windows-audit.yml

fix: wrong mapping of Windows Audit Log EventID 4688

2022-03-30 11:24:24 +02:00

windows-services.yml

Add Bits-Client rules

2022-03-03 06:27:00 +01:00