Thomas Patzke 7fdc78c8bf Merge pull request #36 from dim0x69/master ...

rule to detect mimikatz lsadump::changentlm and lsadump::setntlm

2017-06-19 15:32:56 +02:00

..

builtin

Merge pull request #36 from dim0x69/master

2017-06-19 15:32:56 +02:00

other

Changed level of PsExec events to 'low'

2017-06-17 08:50:16 +02:00

powershell

Rule: PowerShell credential prompt

2017-04-09 10:22:04 +02:00

sysmon

Moved PlugX rule & used builtin ID 4688 for another rule

2017-06-12 11:02:49 +02:00