Florian Roth 7b815ef3e5 Sysmon PowerShell - Suspicious Param Combination

2017-03-05 23:51:39 +01:00

..

builtin

Removed 'last' keyword from 'timeframe' fields

2017-02-28 17:52:40 +01:00

powershell

Added expression

2017-03-05 22:45:54 +01:00

sysmon

Sysmon PowerShell - Suspicious Param Combination

2017-03-05 23:51:39 +01:00