Florian Roth 791d3a8e9a Merge pull request #4006 from SigmaHQ/rule-devel ...

refactor: AV signature rules updated

2023-02-03 17:13:56 +01:00

..

win_audit_cve.yml

chore: add nextron authors tag

2023-02-01 11:14:59 +01:00

win_av_relevant_match.yml

Merge pull request #4006 from SigmaHQ/rule-devel

2023-02-03 17:13:56 +01:00

win_builtin_remove_application.yml

Order yaml field

2022-10-25 11:08:51 +02:00

win_esent_ntdsutil_abuse_susp_location.yml

chore: add nextron authors tag

2023-02-01 11:14:59 +01:00

win_esent_ntdsutil_abuse.yml

chore: add nextron authors tag

2023-02-01 11:14:59 +01:00

win_msi_install_from_susp_locations.yml

chore: add nextron authors tag

2023-02-01 11:14:59 +01:00

win_msi_install_from_web.yml

Order yaml field

2022-10-25 11:08:51 +02:00

win_mssql_add_sysadmin_account.yml

chore: add nextron authors tag

2023-02-01 11:14:59 +01:00

win_mssql_disable_audit_settings.yml

chore: add nextron authors tag

2023-02-01 11:14:59 +01:00

win_mssql_sp_maggie.yml

Order yaml field

2022-10-25 11:08:51 +02:00

win_mssql_sp_procoption_set.yml

chore: add nextron authors tag

2023-02-01 11:14:59 +01:00

win_mssql_xp_cmdshell_audit_log.yml

chore: add nextron authors tag

2023-02-01 11:14:59 +01:00

win_mssql_xp_cmdshell_change.yml

chore: add nextron authors tag

2023-02-01 11:14:59 +01:00

win_software_atera_rmm_agent_install.yml

Promotion rules (#3821)

2022-12-27 12:29:10 +01:00

win_software_restriction_policies_block.yml

fix: add new ref

2023-01-12 18:37:35 +01:00

win_susp_backup_delete.yml

chore: add nextron authors tag

2023-02-01 11:14:59 +01:00

win_susp_msmpeng_crash.yml

chore: add nextron authors tag

2023-02-01 11:14:59 +01:00

win_vul_cve_2020_0688.yml

chore: add nextron authors tag

2023-02-01 11:14:59 +01:00

win_vul_cve_2021_41379.yml

chore: add nextron authors tag

2023-02-01 11:14:59 +01:00

win_werfault_susp_lsass_credential_dump.yml

chore: add nextron authors tag

2023-02-01 11:14:59 +01:00