frack113 7060db3d47 Promotion rules (#3821) ...

* Promotion rules

* fix missing null

* fix: modified date

Co-authored-by: Nasreddine Bencherchali <8741929+nasbench@users.noreply.github.com>

2022-12-27 12:29:10 +01:00

..

posh_pm_alternate_powershell_hosts.yml

fix: more fp found in testing and enhance fp metadata

2022-12-13 11:25:23 +01:00

posh_pm_bad_opsec_artifacts.yml

Promotion rules (#3821)

2022-12-27 12:29:10 +01:00

posh_pm_clear_powershell_history.yml

Update title (#3746)

2022-12-02 18:10:43 +01:00

posh_pm_decompress_commands.yml

Promotion rules (#3821)

2022-12-27 12:29:10 +01:00

posh_pm_get_addbaccount.yml

Order yaml field

2022-10-26 09:43:39 +02:00

posh_pm_get_clipboard.yml

Order yaml field

2022-10-26 09:43:39 +02:00

posh_pm_invoke_obfuscation_clip.yml

update modified date.

2022-12-02 21:57:37 +09:00

posh_pm_invoke_obfuscation_obfuscated_iex.yml

Update Title (#3733)

2022-11-28 06:43:17 +01:00

posh_pm_invoke_obfuscation_stdin.yml

update modified date.

2022-12-02 21:57:37 +09:00

posh_pm_invoke_obfuscation_var.yml

update modified date.

2022-12-02 21:57:37 +09:00

posh_pm_invoke_obfuscation_via_compress.yml

Update Title (#3739)

2022-11-30 11:44:15 +01:00

posh_pm_invoke_obfuscation_via_rundll.yml

Update Title (#3739)

2022-11-30 11:44:15 +01:00

posh_pm_invoke_obfuscation_via_stdin.yml

Update Title (#3739)

2022-11-30 11:44:15 +01:00

posh_pm_invoke_obfuscation_via_use_clip.yml

Update Title (#3739)

2022-11-30 11:44:15 +01:00

posh_pm_invoke_obfuscation_via_use_mhsta.yml

Update Title (#3739)

2022-11-30 11:44:15 +01:00

posh_pm_invoke_obfuscation_via_use_rundll32.yml

Update Title (#3739)

2022-11-30 11:44:15 +01:00

posh_pm_invoke_obfuscation_via_var.yml

update modified date.

2022-12-02 21:57:37 +09:00

posh_pm_powercat.yml

Update title (#3746)

2022-12-02 18:10:43 +01:00

posh_pm_remote_powershell_session.yml

Order yaml field

2022-10-26 09:43:39 +02:00

posh_pm_susp_ad_group_reco.yml

Promotion rules (#3821)

2022-12-27 12:29:10 +01:00

posh_pm_susp_athremotefxvgpudisablementcommand.yml

Update title (#3746)

2022-12-02 18:10:43 +01:00

posh_pm_susp_download.yml

Update title (#3746)

2022-12-02 18:10:43 +01:00

posh_pm_susp_get_nettcpconnection.yml

Update title (#3746)

2022-12-02 18:10:43 +01:00

posh_pm_susp_invocation_generic.yml

Update title (#3746)

2022-12-02 18:10:43 +01:00

posh_pm_susp_invocation_specific.yml

Update title (#3746)

2022-12-02 18:10:43 +01:00

posh_pm_susp_local_group_reco.yml

Promotion rules (#3821)

2022-12-27 12:29:10 +01:00

posh_pm_susp_reset_computermachinepassword.yml

Order yaml field

2022-10-26 09:43:39 +02:00

posh_pm_susp_smb_share_reco.yml

Update title (#3746)

2022-12-02 18:10:43 +01:00

posh_pm_susp_zip_compress.yml

Update title (#3746)

2022-12-02 18:10:43 +01:00

posh_pm_syncappvpublishingserver_exe.yml

Update title (#3746)

2022-12-02 18:10:43 +01:00