Florian Roth 3870fd81a1 Merge branch 'aurora-false-positive-fixing' of https://github.com/SigmaHQ/sigma into aurora-false-positive-fixing

2022-07-31 13:23:11 +02:00

..

create_remote_thread_win_susp_targets.yml

Update selections

2022-07-07 20:55:19 +01:00

create_remote_thread_win_ttdinjec.yml

Update selections and indentation

2022-07-07 20:13:45 +01:00

sysmon_cactustorch.yml

fix: unknown --> Unknown

2022-03-16 13:43:54 +01:00

sysmon_cobaltstrike_process_injection.yml

fix: unknown --> Unknown

2022-03-16 13:43:54 +01:00

sysmon_createremotethread_loadlibrary.yml

Update selections and indentation

2022-07-07 20:13:45 +01:00

sysmon_password_dumper_keepass.yml

rule: KeePass password dumping

2022-04-23 18:25:11 +02:00

sysmon_password_dumper_lsass.yml

remove invalid tag

2022-01-19 18:23:30 +01:00

sysmon_powershell_code_injection.yml

fix: FPs noticed with Aurora

2022-07-28 16:58:24 +02:00

sysmon_susp_powershell_rundll32.yml

New Rules + Update

2022-07-14 17:35:50 +01:00

sysmon_susp_remote_thread.yml

Merge branch 'aurora-false-positive-fixing' of https://github.com/SigmaHQ/sigma into aurora-false-positive-fixing

2022-07-31 13:23:11 +02:00