Nasreddine Bencherchali 9f2b1e081b Merge pull request #3853 from D3F7A5105/master ...

Rules for detecting changes in the storage paths of evtx logs

2023-01-02 15:55:35 +01:00

..

builtin

Update from review

2023-01-02 12:05:54 +01:00

create_remote_thread

Promotion rules (#3821)

2022-12-27 12:29:10 +01:00

create_stream_hash

Fix invalid field cast or name (#3841)

2022-12-30 11:46:21 +01:00

dns_query

Promotion rules (#3821)

2022-12-27 12:29:10 +01:00

driver_load

Fix invalid field cast or name (#3841)

2022-12-30 11:46:21 +01:00

file

Merge pull request #3853 from D3F7A5105/master

2023-01-02 15:55:35 +01:00

image_load

Last lolbin (#3845)

2022-12-31 19:53:44 +01:00

network_connection

Fix invalid field cast or name (#3841)

2022-12-30 11:46:21 +01:00

pipe_created

fix: remove unneeded double backslash escape (#3844)

2022-12-31 08:32:46 +01:00

powershell

Merge branch 'SigmaHQ:master' into nasbench-rule-devel

2023-01-02 14:50:27 +01:00

process_access

fix: remove unneeded double backslash escape (#3844)

2022-12-31 08:32:46 +01:00

process_creation

fix: add missing date

2023-01-02 15:26:41 +01:00

raw_access_thread

feat: enhance duplicate test (#3736)

2022-11-29 13:47:09 +01:00

registry

fix: update evtx tamper rules

2023-01-02 15:25:19 +01:00

sysmon

Refractor (#3794)

2022-12-18 21:00:14 +01:00

wmi_event

Order yaml field

2022-10-25 12:00:56 +02:00