Thomas Patzke 8ee24bf150 WMI persistence rules derived from blog article ...

https://www.eideon.com/2018-03-02-THL03-WMIBackdoors/#so-to-summarize

2018-03-07 23:05:10 +01:00

..

win_rare_schtask_creation.yml

Bugfix: Taskscheduler log source definition

2017-03-17 16:09:31 +01:00

win_tool_psexec.yml

Simplified rule conditions with new condition constructs

2018-03-06 23:14:43 +01:00

win_wmi_persistence.yml

WMI persistence rules derived from blog article

2018-03-07 23:05:10 +01:00