Florian Roth 951ad8c453 rule: suspicious command line flags

2022-11-12 08:33:21 +01:00

..

builtin

revert: changes in krbrelay service rule

2022-11-09 09:33:37 +01:00

create_remote_thread

Order yaml field

2022-10-25 12:00:56 +02:00

create_stream_hash

Order yaml field

2022-10-25 12:00:56 +02:00

dns_query

Order yaml field

2022-10-25 12:00:56 +02:00

driver_load

fix: hash selection with OR in Dell driver rule

2022-11-10 13:22:04 +01:00

file

Merge pull request #3655 from nasbench/nasbench-rule-devel

2022-10-29 09:39:12 +02:00

image_load

fix: FPs found with Aurora

2022-10-31 11:31:30 +01:00

network_connection

Update rules/windows/network_connection/net_connection_win_ngrok_tunnel.yml

2022-11-04 10:49:17 +01:00

pipe_created

Fix typo in selection

2022-10-27 00:12:58 +02:00

powershell

fix: duplicate UUID

2022-11-09 09:56:04 +01:00

process_access

Merge branch 'master' into fix-false-positives

2022-10-27 11:49:52 +02:00

process_creation

rule: suspicious command line flags

2022-11-12 08:33:21 +01:00

raw_access_thread

Order yaml field

2022-10-25 12:00:56 +02:00

registry

Merge branch 'master' into nasbench-rule-devel

2022-10-26 10:39:55 +02:00

sysmon

Order yaml field

2022-10-25 12:00:56 +02:00

wmi_event

Order yaml field

2022-10-25 12:00:56 +02:00