phantinuss bc2188c72b Merge pull request #3375 from nasbench/nasbench-rule-devel ...

Rule Dev [New Rules+Updates]

2022-08-16 16:46:27 +02:00

..

application

Fix typo

2022-08-15 12:46:59 +01:00

applocker

Update win_applocker_file_was_not_allowed_to_run.yml

2022-08-05 15:34:41 +01:00

bits_client

Updates + New Rules

2022-08-09 18:35:45 +01:00

code_integrity

move to builtin

2022-01-21 11:59:13 +01:00

diagnosis/scripted

Change service to diagnosis scripted

2022-08-15 12:45:12 +01:00

dns_server

refactor: rule level adjustments - critical to high

2022-06-18 17:43:22 +02:00

driverframeworks

move to builtin

2022-01-21 11:59:13 +01:00

firewall_as

fix: FPs from fresh Windows 2022 install

2022-04-07 14:15:44 +02:00

ldap

Update Ref+Selection

2022-07-11 14:11:53 +01:00

msexchange

fix list

2022-07-12 19:44:41 +02:00

ntlm

Update win_susp_ntlm_brute_force.yml

2022-02-03 22:02:33 +01:00

printservice

False positive when print dll times out when attempting to register

2022-06-22 14:42:07 +00:00

security

Update EID 5156 field names

2022-08-15 18:28:15 +01:00

security_mitigations

Update

2022-08-05 10:18:07 +01:00

servicebus

move to builtin

2022-01-21 11:59:13 +01:00

shell_core

Update win_shell_core_susp_packages_installed.yml

2022-08-15 00:32:18 +01:00

smbclient

move to builtin

2022-01-21 11:59:13 +01:00

system

New Rules

2022-08-12 13:44:16 +01:00

taskscheduler

fix: several issues

2022-05-12 17:30:30 +02:00

terminalservices

fix: description

2022-04-29 13:10:36 +02:00

windefend

Update backslash

2022-08-13 09:59:31 +02:00

wmi

fix: several FPs against a fresh installed Windows with example applications and basic user interaction 2

2022-02-10 16:12:17 +01:00

win_alert_mimikatz_keywords.yml

refactor: rule adjustments based on hayabusa

2022-06-18 08:39:02 +02:00

win_susp_logon_newcredentials.yml

feat: Generate low sigma match for new credential logon

2022-04-07 10:50:50 +02:00