Florian Roth 35d4c8bc69 fix: FPs noticed in THOR testing

2022-02-21 10:15:27 +01:00

..

powershell_suspicious_download.yml

remove invalid tag

2022-01-19 18:23:30 +01:00

powershell_suspicious_invocation_generic.yml

remove invalid tag

2022-01-19 18:23:30 +01:00

powershell_suspicious_invocation_specific.yml

fix: FPs noticed in THOR testing

2022-02-21 10:15:27 +01:00

powershell_syncappvpublishingserver_exe.yml

Add deprecated status

2021-10-28 20:08:27 +02:00

process_creation_syncappvpublishingserver_exe.yml

Add deprecated status

2021-10-28 20:08:27 +02:00

sysmon_mimikatz_detection_lsass.yml

fix: FPs in deprecated rule

2022-01-28 23:43:11 +01:00

sysmon_rclone_execution.yml

refactor: change all " of them" expressions

2022-01-11 10:59:57 +01:00

win_susp_esentutl_activity.yml

Add deprecated status

2021-10-28 20:08:27 +02:00

win_susp_rclone_exec.yml

Add deprecated status

2021-10-28 20:08:27 +02:00

win_susp_vssadmin_ntds_activity.yml

Add deprecated status

2021-10-28 20:08:27 +02:00