Bhabesh d7d9a19cd4 Added rule for shellcode injection by Metasploit and Empire

2022-03-11 20:05:22 +05:45

..

builtin

Fix contains

2022-03-06 20:50:19 +01:00

create_remote_thread

…

create_stream_hash

…

deprecated

fix: FPs noticed in THOR testing

2022-02-21 10:15:27 +01:00

dns_query

Name Normalization

2022-02-27 07:39:46 +01:00

driver_load

…

etw/file_rename

fix: FPs noticed with VSCode

2022-03-07 15:41:00 +01:00

file_delete

Name Normalization

2022-02-27 07:39:46 +01:00

file_event

fix: FPs with webex and temp assembly

2022-03-02 14:48:37 +01:00

image_load

Name Normalization

2022-02-27 10:58:14 +01:00

network_connection

Merge branch 'master' into aurora-false-positive-fixing

2022-03-07 15:40:42 +01:00

pipe_created

Name Normalization

2022-02-27 10:58:14 +01:00

powershell

fix: values missed escaping

2022-03-05 10:39:15 +01:00

process_access

Added rule for shellcode injection by Metasploit and Empire

2022-03-11 20:05:22 +05:45

process_creation

Merge branch 'master' into pr/2785

2022-03-08 08:43:59 +01:00

raw_access_thread

fix: FPs noticed with Aurora

2022-02-21 18:43:18 +01:00

registry_event

fix: issue with contains

2022-03-07 16:43:06 +01:00

sysmon

…

wmi_event

…