yt0ng 6a014a3dc8 MSHTA spwaned by SVCHOST as seen in LethalHTA ...

"Furthermore it can be detected by an mshta.exe process spawned by svchost.exe."

2018-07-06 19:52:58 +02:00

..

application

Fixes for Elasticsearch query correctness CI tests

2018-04-09 22:33:29 +02:00

apt

Corrected CrackMapExec rule

2018-04-09 08:40:03 +02:00

linux

Adjusted rules to the new specs reg "not null" usage

2018-06-28 09:30:31 +02:00

network

Rules: Telegram Bot API access

2018-06-05 16:25:43 +02:00

proxy

Bugfix in Flash Downloader Rule

2018-06-30 23:39:38 +02:00

web

Change All "str" references to be "list"to mach schema update

2018-01-28 02:24:16 +03:00

windows

MSHTA spwaned by SVCHOST as seen in LethalHTA

2018-07-06 19:52:58 +02:00