Nasreddine Bencherchali 5a70e402b3 Update rules

2022-11-09 16:13:17 +01:00

..

posh_pc_alternate_powershell_hosts.yml

Order yaml field

2022-10-26 09:43:39 +02:00

posh_pc_delete_volume_shadow_copies.yml

Order yaml field

2022-10-26 09:43:39 +02:00

posh_pc_downgrade_attack.yml

Order yaml field

2022-10-26 09:43:39 +02:00

posh_pc_exe_calling_ps.yml

Order yaml field

2022-10-26 09:43:39 +02:00

posh_pc_powercat.yml

Order yaml field

2022-10-26 09:43:39 +02:00

posh_pc_remote_powershell_session.yml

Order yaml field

2022-10-26 09:43:39 +02:00

posh_pc_renamed_powershell.yml

Order yaml field

2022-10-26 09:43:39 +02:00

posh_pc_susp_athremotefxvgpudisablementcommand.yml

Order yaml field

2022-10-26 09:43:39 +02:00

posh_pc_susp_download.yml

Update rules

2022-11-09 16:13:17 +01:00

posh_pc_susp_get_nettcpconnection.yml

Order yaml field

2022-10-26 09:43:39 +02:00

posh_pc_susp_zip_compress.yml

Fix related

2022-10-09 17:28:05 +02:00

posh_pc_tamper_with_windows_defender.yml

Order yaml field

2022-10-26 09:43:39 +02:00

posh_pc_wsman_com_provider_no_powershell.yml

old experimental rule promotion

2022-10-09 16:54:04 +02:00

posh_pc_xor_commandline.yml

Order yaml field

2022-10-26 09:43:39 +02:00