Florian Roth 187cb6b47e Merge pull request #3694 from SigmaHQ/aurora-false-positive-fixing ...

Aurora false positive fixing

2022-11-15 09:35:45 +01:00

..

builtin

Merge pull request #3694 from SigmaHQ/aurora-false-positive-fixing

2022-11-15 09:35:45 +01:00

create_remote_thread

Order yaml field

2022-10-25 12:00:56 +02:00

create_stream_hash

Add browsers

2022-10-31 20:57:22 +01:00

dns_query

Add browsers

2022-10-31 20:57:22 +01:00

driver_load

fix: hash selection with OR in Dell driver rule

2022-11-10 13:22:04 +01:00

file

fix: bcdedit by svchost FP

2022-11-10 16:31:54 +01:00

image_load

Update image_load_susp_python_image_load.yml

2022-11-08 17:33:45 +01:00

network_connection

Merge pull request #3670 from nasbench/fix-false-positives

2022-11-04 17:56:32 +01:00

pipe_created

Update PR

2022-11-03 10:57:56 -04:00

powershell

Merge branch 'master' into nasbench-rule-devel

2022-11-09 16:14:38 +01:00

process_access

fix: FPs noticed with Aurora

2022-11-13 20:26:03 +01:00

process_creation

fix: change modified date

2022-11-14 17:21:08 +01:00

raw_access_thread

Update raw_access_thread_disk_access_using_illegitimate_tools.yml

2022-11-08 19:10:05 +01:00

registry

updated modified date

2022-11-09 18:32:47 +01:00

sysmon

Order yaml field

2022-10-25 12:00:56 +02:00

wmi_event

Order yaml field

2022-10-25 12:00:56 +02:00