Florian Roth 72de90d2aa fix: FPs

2022-06-20 12:52:23 +02:00

..

posh_pc_alternate_powershell_hosts.yml

fix: FPs noticed with Aurora

2022-02-21 18:43:18 +01:00

posh_pc_delete_volume_shadow_copies.yml

refactor: some adjustments

2022-03-04 16:34:15 +01:00

posh_pc_downgrade_attack.yml

fix: remove penetration test as valid false positive reason

2022-03-16 14:33:18 +01:00

posh_pc_exe_calling_ps.yml

fix: remove penetration test as valid false positive reason

2022-03-16 14:33:18 +01:00

posh_pc_powercat.yml

Rename powershell_classic

2022-01-15 10:30:03 +01:00

posh_pc_remote_powershell_session.yml

fix: FPs

2022-06-20 12:52:23 +02:00

posh_pc_renamed_powershell.yml

fix: unknown --> Unknown

2022-03-16 13:43:54 +01:00

posh_pc_susp_athremotefxvgpudisablementcommand.yml

Rename powershell_classic

2022-01-15 10:30:03 +01:00

posh_pc_susp_download.yml

Renamed suspicious in filenames to susp

2022-05-19 09:37:04 +02:00

posh_pc_susp_get_nettcpconnection.yml

Rename powershell_classic

2022-01-15 10:30:03 +01:00

posh_pc_susp_zip_compress.yml

Rename powershell_classic

2022-01-15 10:30:03 +01:00

posh_pc_tamper_with_windows_defender.yml

Rename powershell_classic

2022-01-15 10:30:03 +01:00

posh_pc_wsman_com_provider_no_powershell.yml

Rename powershell_classic

2022-01-15 10:30:03 +01:00

posh_pc_xor_commandline.yml

fix: unknown --> Unknown

2022-03-16 13:43:54 +01:00