Tim Rauch b6046803a0 fix: fixed rules after review

2022-10-04 10:06:15 +02:00

..

file_delete_win_cve_2021_1675_printspooler_del.yml

Add "\" to "Image|endswith" modifier

2022-06-02 13:39:07 +01:00

file_delete_win_delete_appli_log.yml

Update Ref+Selection

2022-07-11 14:11:53 +01:00

file_delete_win_delete_backup_file.yml

Update Ref+Selection

2022-07-11 14:11:53 +01:00

file_delete_win_delete_prefetch.yml

chore: harmonization of generic 'nt system' user checks

2022-05-27 15:16:31 +02:00

file_delete_win_sysinternals_sdelete_file_deletion.yml

Update file_delete_win_sysinternals_sdelete_file_deletion.yml

2022-09-21 11:57:10 +02:00

file_delete_win_unusual_deletion_by_dns_exe.yml

New Rules: transformed elastic to sigma rules

2022-09-28 16:45:22 +02:00

file_delete_win_webserver_access_logs_deleted.yml

fix: fixed rules after review

2022-10-04 10:06:15 +02:00