Florian Roth 11fc576103 fix: FPs with rules

2021-11-25 19:04:27 +01:00

..

pipe_created_tool_psexec.yml

Adding some additional details about sysmon config and also way to test detection.

2021-10-25 21:30:33 +02:00

sysmon_alternate_powershell_hosts_pipe.yml

fix: FPs with rules

2021-11-25 19:04:27 +01:00

sysmon_apt_turla_namedpipes.yml

add missing MITRE Techniques

2021-11-20 12:26:01 +01:00

sysmon_cred_dump_tools_named_pipes.yml

Adding some additional details about sysmon config and also way to test detection.

2021-10-25 21:30:33 +02:00

sysmon_efspotato_namedpipe.yml

Adding some additional details about sysmon config and also way to test detection.

2021-10-25 21:30:33 +02:00

sysmon_mal_cobaltstrike_re.yml

Adding some additional details about sysmon config and also way to test detection.

2021-10-25 21:30:33 +02:00

sysmon_mal_cobaltstrike.yml

Adding some additional details about sysmon config and also way to test detection.

2021-10-25 21:30:33 +02:00

sysmon_mal_namedpipes.yml

Corrected typo in HyperBro malware name

2021-11-12 08:36:13 +01:00

sysmon_powershell_execution_pipe.yml

Clean-up service: sysmon as it will be replaced by filling the category

2021-04-15 02:02:25 +02:00

sysmon_psexec_pipes_artifacts.yml

Adding some additional details about sysmon config and also way to test detection.

2021-10-25 21:30:33 +02:00

sysmon_susp_adfs_namedpipe_connection.yml

fix logsources

2021-11-07 09:55:02 +01:00

sysmon_susp_cobaltstrike_pipe_patterns.yml

Adding some additional details about sysmon config and also way to test detection.

2021-10-25 21:30:33 +02:00

sysmon_susp_wmi_consumer_namedpipe.yml

add missing MITRE Techniques

2021-11-20 12:26:01 +01:00