frack113 53651cdd2f Add Bits-Client rules

2022-03-03 06:27:00 +01:00

..

application

fix: remove Aurora filter out, no longer needed

2022-03-02 11:14:01 +01:00

applocker

move to builtin

2022-01-21 11:59:13 +01:00

bits_client

Add Bits-Client rules

2022-03-03 06:27:00 +01:00

code_integrity

move to builtin

2022-01-21 11:59:13 +01:00

dns_server

move to builtin

2022-01-21 11:59:13 +01:00

driverframeworks

move to builtin

2022-01-21 11:59:13 +01:00

firewall_as

fix: TiWorker.exe FW change

2022-02-22 13:58:21 +01:00

ldap

move to builtin

2022-01-21 11:59:13 +01:00

msexchange

fix: unescaped double back slashes

2022-02-01 15:57:15 +01:00

ntlm

Update win_susp_ntlm_brute_force.yml

2022-02-03 22:02:33 +01:00

printservice

move to builtin

2022-01-21 11:59:13 +01:00

security

Update modified date

2022-02-24 14:38:35 -05:00

servicebus

move to builtin

2022-01-21 11:59:13 +01:00

smbclient

move to builtin

2022-01-21 11:59:13 +01:00

system

fix: FPs noticed with Aurora

2022-02-21 18:43:18 +01:00

taskscheduler

move to builtin

2022-01-21 11:59:13 +01:00

windefend

Merge branch 'aurora-false-positive-fixing' of https://github.com/SigmaHQ/sigma into aurora-false-positive-fixing

2022-02-09 18:18:59 +01:00

wmi

fix: several FPs against a fresh installed Windows with example applications and basic user interaction 2

2022-02-10 16:12:17 +01:00

win_alert_mimikatz_keywords.yml

remove invalid tag

2022-01-19 18:23:30 +01:00