Swachchhanda Shrawan Poudel 77f4b0b2ec Merge PR #5741 from @swachchhanda000 - Add Splunk Rules for MSIX/AppX ...

new: Successful MSIX/AppX Package Installation
new: Windows AppX Deployment Full Trust Package Installation
new: Windows AppX Deployment Unsigned Package Installation
new: Windows MSIX Package Support Framework AI_STUBS Execution

---------

Co-authored-by: Nasreddine Bencherchali <monsteroffire2@gmail.com>

2026-01-24 17:04:41 +01:00

..

application

Merge PR #5790 from @nasbench - Metadata Updates

2025-12-24 17:50:21 +01:00

applocker

Merge PR #5790 from @nasbench - Metadata Updates

2025-12-24 17:50:21 +01:00

appmodel_runtime

Merge PR #5790 from @nasbench - Metadata Updates

2025-12-24 17:50:21 +01:00

appxdeployment_server

Merge PR #5741 from @swachchhanda000 - Add Splunk Rules for MSIX/AppX

2026-01-24 17:04:41 +01:00

appxpackaging_om

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

bits_client

Merge PR #5804 from @swachchhanda000 - enhance rules related with file download from file sharing websites

2025-12-12 08:04:27 +05:45

capi2

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

certificate_services_client_lifecycle_system

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

code_integrity

chore: ci: bump validator version (#5722)

2025-10-23 15:43:47 +02:00

diagnosis/scripted

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

dns_client

Merge PR #5740 from @swachchhanda000 - chore: reorganize threat specific rules into rules-emerging-threats directory

2025-11-10 12:00:08 +01:00

dns_server

chore: ci: bump validator version (#5722)

2025-10-23 15:43:47 +02:00

driverframeworks

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

firewall_as

Merge PR #5679 from @swachchhanda000 - chore: update evtx baseline to v0.8.2

2025-10-09 13:03:39 +02:00

iis-configuration

Merge PR #5637 from @nasbench - Promote older rules status from experimental to test

2025-09-22 11:41:37 +02:00

ldap

Merge PR #5513 from @swachchhanda000 - fix FPs observed via Aurora

2025-07-08 10:29:01 +02:00

lsa_server

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

msexchange

Merge PR #5769 from @nasbench - fix keywords rule and remove the fields field

2025-11-24 09:54:29 +01:00

ntlm

Merge PR #5769 from @nasbench - fix keywords rule and remove the fields field

2025-11-24 09:54:29 +01:00

openssh

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

security

Merge PR #5789 from @swachchhanda000 - Add fps filter observed on ARM-based Windows updates

2025-12-09 08:29:51 +05:45

security_mitigations

chore: ci: bump validator version (#5722)

2025-10-23 15:43:47 +02:00

servicebus

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

shell_core

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

smbclient/security

Merge PR #5769 from @nasbench - fix keywords rule and remove the fields field

2025-11-24 09:54:29 +01:00

smbserver/connectivity

Merge PR #5686 from @mm-abdelghani - Unsigned or Unencrypted SMB Connection to Share Established

2025-10-23 13:43:15 +02:00

system

Merge PR #5769 from @nasbench - fix keywords rule and remove the fields field

2025-11-24 09:54:29 +01:00

taskscheduler

chore: ci: bump validator version (#5722)

2025-10-23 15:43:47 +02:00

terminalservices

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

windefend

Merge PR #5022 from @jaegeral - Fix some typos in rules metadata

2024-09-22 19:14:26 +02:00

wmi

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

win_alert_mimikatz_keywords.yml

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00