Nasreddine Bencherchali b52abdef5c Merge pull request #4120 from leer-ts/master ...

feat: add new rule related to `CVE-2023-23397` exploitation

2023-03-17 23:39:49 +01:00

..

builtin

fix: remove backslash and add example

2023-03-17 23:32:10 +01:00

create_remote_thread

feat: update and fixes

2023-03-09 22:10:42 +01:00

create_stream_hash

fix: change title from domain to wbesites

2023-02-10 10:49:52 +01:00

dns_query

Merge pull request #4074 from pfpt-dmiller/patch-1

2023-02-28 18:28:56 +01:00

driver_load

fix: typos in multiple rules (#4011)

2023-02-06 13:53:23 +01:00

file

feat: new rule Potential Binary Or Script Dropper Via PowerShell.EXE (#4116)

2023-03-17 12:56:02 +01:00

image_load

chore: increase level of some sideloading rules

2023-03-15 01:10:52 +01:00

network_connection

New rules added for LockBit and Reddit used for C2. (#4045)

2023-02-20 12:07:02 +01:00

pipe_created

fix: resolves #4015

2023-02-07 14:33:56 +01:00

powershell

feat: update cmd based rules

2023-03-07 14:13:57 +01:00

process_access

fix: fp found in testing

2023-03-14 23:58:04 +01:00

process_creation

fix: detection name word 'activity' (#4119)

2023-03-17 23:11:15 +01:00

raw_access_thread

fix: more fp found in testing

2023-01-18 20:16:34 +01:00

registry

feat: new rules related to ZScaler blog - OneNote: A Growing Threat for Malware Distribution (#4111)

2023-03-17 13:00:57 +01:00

sysmon

fix: typos in multiple rules (#4011)

2023-02-06 13:53:23 +01:00

wmi_event

chore: add nextron authors tag

2023-02-01 11:14:59 +01:00