juju4 83fa83aa43 suspicious certutil activity rules

2017-07-30 11:09:51 -04:00

..

apt

Moved PlugX rule & used builtin ID 4688 for another rule

2017-06-12 11:02:49 +02:00

linux

Linux: Suspicious VSFTPD errors

2017-07-05 18:59:51 -06:00

network

Fix: Search to log source in network rule

2017-04-15 11:32:38 +02:00

proxy

User-Agent rules split up in separate files

2017-07-08 09:59:05 -06:00

web

Bugfix: Added time frame to correlation rule

2017-03-12 17:11:29 +01:00

windows

suspicious certutil activity rules

2017-07-30 11:09:51 -04:00