GtUGtHGtNDtEUaE da7a8305f1 Merge PR #5176 from @GtUGtHGtNDtEUaE - Update rules covering EventID 4660 ...

remove: Windows Defender Exclusion Deleted
fix: WCE wceaux.dll Access - Remove EventIDs `4658` and `4660` as they both do not contain the `ObjectName` field

2025-01-31 18:08:59 +01:00

..

application

Merge PR #5144 from @djlukic - Fix multiple FPs

2024-12-27 16:38:02 +01:00

applocker

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

appmodel_runtime

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

appxdeployment_server

Merge PR #5144 from @djlukic - Fix multiple FPs

2024-12-27 16:38:02 +01:00

appxpackaging_om

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

bits_client

Merge PR #5144 from @djlukic - Fix multiple FPs

2024-12-27 16:38:02 +01:00

capi2

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

certificate_services_client_lifecycle_system

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

code_integrity

Merge PR #5144 from @djlukic - Fix multiple FPs

2024-12-27 16:38:02 +01:00

diagnosis/scripted

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

dns_client

Merge PR #4947 from @omaramin17 - Add DNS Query To Put.io - DNS Client

2024-08-23 12:08:08 +02:00

dns_server

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

driverframeworks

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

firewall_as

Merge PR #5101 from @nasbench - Promote older rules status from experimental to test

2024-12-01 13:40:32 +01:00

iis-configuration

Merge PR #4935 from @frack113 - Add new IIS logsource and related rules

2024-10-06 22:44:05 +02:00

ldap

Merge PR #4985 from @secDre4mer - Update Potential Active Directory Reconnaissance/Enumeration Via LDAP

2024-08-27 13:36:15 +02:00

lsa_server

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

msexchange

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

ntlm

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

openssh

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

security

Merge PR #5176 from @GtUGtHGtNDtEUaE - Update rules covering EventID 4660

2025-01-31 18:08:59 +01:00

security_mitigations

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

servicebus

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

shell_core

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

smbclient/security

Merge PR #5007 from @fukusuket - Fix unreachable GitHub URL references

2024-09-13 11:14:11 +02:00

system

Merge PR #5149 from @nasbench - Promote older rules status from experimental to test

2025-01-06 15:36:19 +01:00

taskscheduler

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

terminalservices

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

windefend

Merge PR #5022 from @jaegeral - Fix some typos in rules metadata

2024-09-22 19:14:26 +02:00

wmi

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

win_alert_mimikatz_keywords.yml

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00