yugoslavskiy 9fba097421 add sysmon_in_memory_powershell.yml by Tom Kern

2019-12-01 23:26:00 +01:00

..

application

Added UUIDs to rules

2019-11-12 23:12:27 +01:00

apt

add apt silence rules by Group-IB

2019-11-28 21:15:55 +01:00

compliance

Added UUIDs to rules

2019-11-12 23:12:27 +01:00

generic

fix some typos and remove redundand references

2019-10-29 01:40:06 +03:00

linux

resolve conflicts with rule IDs; restored and deprecated sysmon_mimikatz_detection_lsass.yml

2019-11-19 02:11:19 +01:00

network

resolve conflicts with rule IDs; restored and deprecated sysmon_mimikatz_detection_lsass.yml

2019-11-19 02:11:19 +01:00

proxy

resolve conflicts with rule IDs; restored and deprecated sysmon_mimikatz_detection_lsass.yml

2019-11-19 02:11:19 +01:00

unsupported_logic

add JET CSIRT team sysmon_process_reimaging.yml with unsupported logic

2019-11-19 02:17:07 +01:00

web

rule: PulseSecure CVE-2019-11510 attack

2019-11-18 15:33:58 +01:00

windows

add sysmon_in_memory_powershell.yml by Tom Kern

2019-12-01 23:26:00 +01:00