frack113 6ee5218b17 Add Powershell FP

2023-04-12 07:46:36 +02:00

..

builtin

feat: new rules, updates and fp fixes (#4162)

2023-04-11 13:04:22 +02:00

create_remote_thread

feat: new rules, updates and fp fixes (#4136)

2023-04-03 12:06:14 +02:00

create_stream_hash

fix: change title from domain to wbesites

2023-02-10 10:49:52 +01:00

dns_query

feat: update 3cx compromise related rules (#4156)

2023-03-31 15:01:41 +02:00

driver_load

fix: typos in multiple rules (#4011)

2023-02-06 13:53:23 +01:00

file

feat: new rules, updates and fp fixes (#4162)

2023-04-11 13:04:22 +02:00

image_load

feat: new rules, updates and fp fixes (#4136)

2023-04-03 12:06:14 +02:00

network_connection

feat: update 3cx compromise related rules (#4156)

2023-03-31 15:01:41 +02:00

pipe_created

fix: resolves #4015

2023-02-07 14:33:56 +01:00

powershell

Add Powershell FP

2023-04-12 07:46:36 +02:00

process_access

feat: new rules, updates and fp fixes (#4162)

2023-04-11 13:04:22 +02:00

process_creation

feat: new rules, updates and fp fixes (#4162)

2023-04-11 13:04:22 +02:00

raw_access_thread

fix: more fp found in testing

2023-01-18 20:16:34 +01:00

registry

feat: new rules, updates and fp fixes (#4162)

2023-04-11 13:04:22 +02:00

sysmon

fix: typos in multiple rules (#4011)

2023-02-06 13:53:23 +01:00

wmi_event

chore: add nextron authors tag

2023-02-01 11:14:59 +01:00