frack113 1033b3f404 change status to test

2023-01-27 06:48:34 +01:00

..

pipe_created_alternate_powershell_hosts_pipe.yml

Order yaml field

2022-10-25 12:00:56 +02:00

pipe_created_apt_turla_namedpipes.yml

Fix typo in selection

2022-10-27 00:12:58 +02:00

pipe_created_cred_dump_tools_named_pipes.yml

Order yaml field

2022-10-25 12:00:56 +02:00

pipe_created_diagtrack_eop_default_pipe.yml

Order yaml field

2022-10-25 12:00:56 +02:00

pipe_created_efspotato_namedpipe.yml

Order yaml field

2022-10-25 12:00:56 +02:00

pipe_created_koh_default_pipe.yml

Order yaml field

2022-10-25 12:00:56 +02:00

pipe_created_mal_cobaltstrike_re.yml

fix: remove unneeded double backslash escape (#3844)

2022-12-31 08:32:46 +01:00

pipe_created_mal_cobaltstrike.yml

fix: rename links from old repo to SigmaHQ

2022-12-27 21:05:16 +01:00

pipe_created_mal_namedpipes.yml

change status to test

2023-01-27 06:48:34 +01:00

pipe_created_paexec_default_pipe.yml

Add/Update PAExec Rules

2022-10-26 23:27:17 +02:00

pipe_created_powershell_execution_pipe.yml

Order yaml field

2022-10-25 12:00:56 +02:00

pipe_created_psexec_default_pipe_from_susp_location.yml

Order yaml field

2022-10-25 12:00:56 +02:00

pipe_created_psexec_default_pipe.yml

Update PsExec Rules

2022-10-26 23:15:01 +02:00

pipe_created_psexec_pipes_artifacts.yml

Order yaml field

2022-10-25 12:00:56 +02:00

pipe_created_susp_adfs_namedpipe_connection.yml

change status to test

2023-01-27 06:48:34 +01:00

pipe_created_susp_cobaltstrike_pipe_patterns.yml

old experimental rule promotion

2022-10-09 16:54:04 +02:00

pipe_created_susp_wmi_consumer_namedpipe.yml

old experimental rule promotion

2022-10-09 16:54:04 +02:00