remotephone@gmail.com a85c19db17 updating files to cover broader network discovery logic, renaming alert, adding recommended changes

2020-10-13 00:39:53 -05:00

..

application

Added UUIDs to rules

2019-11-12 23:12:27 +01:00

apt

add apt silence rules by Group-IB

2019-11-28 21:15:55 +01:00

compliance

Added UUIDs to rules

2019-11-12 23:12:27 +01:00

generic

fix some typos and remove redundand references

2019-10-29 01:40:06 +03:00

linux

updating files to cover broader network discovery logic, renaming alert, adding recommended changes

2020-10-13 00:39:53 -05:00

network

resolve conflicts with rule IDs; restored and deprecated sysmon_mimikatz_detection_lsass.yml

2019-11-19 02:11:19 +01:00

proxy

resolve conflicts with rule IDs; restored and deprecated sysmon_mimikatz_detection_lsass.yml

2019-11-19 02:11:19 +01:00

unsupported_logic

add JET CSIRT team sysmon_process_reimaging.yml with unsupported logic

2019-11-19 02:17:07 +01:00

web

rule: PulseSecure CVE-2019-11510 attack

2019-11-18 15:33:58 +01:00

windows

update authors for 2 rules

2019-12-07 02:10:06 +01:00