Patryk a9faa3dc33 Create sysmon_mimikatz_trough_winrm.yml ...

Detects usage of mimikatz through WinRM protocol

2019-05-20 12:25:58 +02:00

..

builtin

Changed rule

2019-05-09 23:49:39 +02:00

malware

Update win_mal_ursnif.yml

2019-04-14 11:51:13 -05:00

other

Converted to use the new process_creation data source

2019-03-09 20:57:59 +03:00

powershell

Added missing tags and some minor improvements

2019-03-05 23:25:49 +01:00

process_creation

fix: fixed reference list, otherwise it's not valid string list

2019-05-10 10:37:12 +02:00

sysmon

Create sysmon_mimikatz_trough_winrm.yml

2019-05-20 12:25:58 +02:00