Djordje Lukic fa68da90b1 Merge PR #5145 from @djlukic - Update Regex of some rules ...

update: Suspicious Non PowerShell WSMAN COM Provider - Update regex to use `\s+` to account for different parsers
update: Renamed Powershell Under Powershell Channel - Update regex to use `\s+` to account for different parsers
---------

Co-authored-by: Nasreddine Bencherchali <nasreddineb@splunk.com>

2024-12-28 22:40:03 +01:00

..

posh_pc_abuse_nslookup_with_dns_records.yml

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

posh_pc_delete_volume_shadow_copies.yml

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

posh_pc_downgrade_attack.yml

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

posh_pc_exe_calling_ps.yml

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

posh_pc_powercat.yml

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

posh_pc_remote_powershell_session.yml

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

posh_pc_remotefxvgpudisablement_abuse.yml

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

posh_pc_renamed_powershell.yml

Merge PR #5145 from @djlukic - Update Regex of some rules

2024-12-28 22:40:03 +01:00

posh_pc_susp_download.yml

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

posh_pc_susp_get_nettcpconnection.yml

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

posh_pc_susp_zip_compress.yml

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

posh_pc_tamper_windows_defender_set_mp.yml

Merge PR #5065 from @nasbench - Promote older rules status from experimental to test

2024-11-01 10:21:04 +01:00

posh_pc_wsman_com_provider_no_powershell.yml

Merge PR #5145 from @djlukic - Update Regex of some rules

2024-12-28 22:40:03 +01:00