Nasreddine Bencherchali 7e25625976 Update 2

2022-07-07 15:46:49 +01:00

..

proc_creation_macos_applescript.yml

chore: test rules: reactivate single value list check

2022-05-10 17:13:04 +02:00

proc_creation_macos_base64_decode.yml

refactor condition

2022-06-03 15:35:24 +02:00

proc_creation_macos_binary_padding.yml

chore: test rules: reactivate single value list check

2022-05-10 17:13:04 +02:00

proc_creation_macos_change_file_time_attr.yml

refactor: move macos rules to separate dir

2022-03-24 09:17:05 +01:00

proc_creation_macos_clear_system_logs.yml

Update 2

2022-07-07 15:46:49 +01:00

proc_creation_macos_create_account.yml

Update 2

2022-07-07 15:46:49 +01:00

proc_creation_macos_create_hidden_account.yml

Update

2022-07-07 15:37:28 +01:00

proc_creation_macos_creds_from_keychain.yml

Update

2022-07-07 15:37:28 +01:00

proc_creation_macos_disable_security_tools.yml

Update

2022-07-07 15:37:28 +01:00

proc_creation_macos_file_and_directory_discovery.yml

Update 2

2022-07-07 15:46:49 +01:00

proc_creation_macos_find_cred_in_files.yml

Update 2

2022-07-07 15:46:49 +01:00

proc_creation_macos_gui_input_capture.yml

Update 2

2022-07-07 15:46:49 +01:00

proc_creation_macos_local_account.yml

Update 2

2022-07-07 15:46:49 +01:00

proc_creation_macos_local_groups.yml

Update 2

2022-07-07 15:46:49 +01:00

proc_creation_macos_network_service_scanning.yml

Update 2

2022-07-07 15:46:49 +01:00

proc_creation_macos_network_sniffing.yml

Update 2

2022-07-07 15:46:49 +01:00

proc_creation_macos_remote_system_discovery.yml

chore: test rules: reactivate single value list check

2022-05-10 17:13:04 +02:00

proc_creation_macos_schedule_task_job_cron.yml

chore: test rules: reactivate single value list check

2022-05-10 17:13:04 +02:00

proc_creation_macos_screencapture.yml

Reference Update [Batch 1]

2022-07-07 15:24:15 +01:00

proc_creation_macos_security_software_discovery.yml

Reference Update [Batch 1]

2022-07-07 15:24:15 +01:00

proc_creation_macos_space_after_filename.yml

Reference Update [Batch 1]

2022-07-07 15:24:15 +01:00

proc_creation_macos_split_file_into_pieces.yml

Reference Update [Batch 1]

2022-07-07 15:24:15 +01:00

proc_creation_macos_susp_histfile_operations.yml

Reference Update [Batch 1]

2022-07-07 15:24:15 +01:00

proc_creation_macos_susp_macos_firmware_activity.yml

Renamed suspicious in filenames to susp

2022-05-19 09:37:04 +02:00

proc_creation_macos_system_network_connections_discovery.yml

Reference Update [Batch 1]

2022-07-07 15:24:15 +01:00

proc_creation_macos_system_network_discovery.yml

Update proc_creation_macos_system_network_discovery.yml

2022-07-07 15:28:45 +01:00

proc_creation_macos_system_shutdown_reboot.yml

Reference Update [Batch 1]

2022-07-07 15:24:15 +01:00

proc_creation_macos_xattr_gatekeeper_bypass.yml

Reference Update [Batch 1]

2022-07-07 15:24:15 +01:00