Alessio Dalla Piazza 9f7eee8bb1 Add the ability to detect PowerUp - Invoke-AllChecks ...

PowerUp allow attackers to check if is possible to have a local privilege escalation attacks against Windows systems. The main function is called "Invoke-AllChecks" and check possible path of escalation.

2020-01-24 15:31:06 +01:00

..

builtin

Merge pull request #537 from webhead404/webhead404-contrib-sigma

2019-12-13 21:50:01 +01:00

malware

Add scriptlets

2019-11-14 22:26:22 +01:00

other

Added UUIDs to rules

2019-11-12 23:12:27 +01:00

powershell

Add the ability to detect PowerUp - Invoke-AllChecks

2020-01-24 15:31:06 +01:00

process_creation

fix: SCCM false positives with whoami.exe rule

2020-01-07 12:13:47 +01:00

sysmon

Fixed rule: added condition

2020-01-07 15:20:16 +01:00