BlueTeamOps 8fa8a73551 Updated proc_creation_win_iis_service_account_password_dumped.yml (#3682) ...

Co-authored-by: Nasreddine Bencherchali <8741929+nasbench@users.noreply.github.com>

2022-12-06 13:10:58 +01:00

..

builtin

feat: new rules and fixes (#3759)

2022-12-06 12:13:20 +01:00

create_remote_thread

Order yaml field

2022-10-25 12:00:56 +02:00

create_stream_hash

Merge pull request #3757 from SigmaHQ/aurora-false-positive-fixing

2022-12-05 18:54:31 +01:00

dns_query

Update title (#3734)

2022-11-29 07:36:45 +01:00

driver_load

fix: fix empty field in selection

2022-11-30 00:57:38 +01:00

file

Gs3cl patch 1 (#3753)

2022-12-05 10:39:58 +01:00

image_load

fix: apply code review changes

2022-12-03 11:55:54 +01:00

network_connection

feat: general updates and fixes

2022-12-02 23:16:03 +01:00

pipe_created

refactor: remove unnesessary escape.

2022-12-03 21:56:00 +09:00

powershell

Gs3cl patch 1 (#3753)

2022-12-05 10:39:58 +01:00

process_access

fix: missing modified date update

2022-12-05 19:58:10 +01:00

process_creation

Updated proc_creation_win_iis_service_account_password_dumped.yml (#3682)

2022-12-06 13:10:58 +01:00

raw_access_thread

feat: enhance duplicate test (#3736)

2022-11-29 13:47:09 +01:00

registry

feat: new rules and fixes (#3759)

2022-12-06 12:13:20 +01:00

sysmon

Update Title (#3731)

2022-11-27 19:19:27 +01:00

wmi_event

Order yaml field

2022-10-25 12:00:56 +02:00