Thomas Patzke 7fdc78c8bf Merge pull request #36 from dim0x69/master ...

rule to detect mimikatz lsadump::changentlm and lsadump::setntlm

2017-06-19 15:32:56 +02:00

..

apt

Moved PlugX rule & used builtin ID 4688 for another rule

2017-06-12 11:02:49 +02:00

linux

Linux Generic Rules

2017-05-02 20:32:38 +02:00

network

Fix: Search to log source in network rule

2017-04-15 11:32:38 +02:00

proxy

Rule: Suspicious executable downloads

2017-03-13 16:11:43 +01:00

web

Bugfix: Added time frame to correlation rule

2017-03-12 17:11:29 +01:00

windows

Merge pull request #36 from dim0x69/master

2017-06-19 15:32:56 +02:00