Florian Roth 0b4bfad074 Merge branch 'master' into aurora-false-positive-fixing

2022-03-29 21:06:30 +02:00

..

application

fix: FP fix

2022-03-11 11:46:25 +01:00

applocker

move to builtin

2022-01-21 11:59:13 +01:00

bits_client

Add Bits-Client rules

2022-03-03 06:27:00 +01:00

code_integrity

move to builtin

2022-01-21 11:59:13 +01:00

dns_server

fix: unknown --> Unknown

2022-03-16 13:43:54 +01:00

driverframeworks

move to builtin

2022-01-21 11:59:13 +01:00

firewall_as

refactor: less relevant FW event

2022-03-28 17:06:00 +02:00

ldap

move to builtin

2022-01-21 11:59:13 +01:00

msexchange

fix: legitimate --> Legitimate

2022-03-16 14:35:19 +01:00

ntlm

Update win_susp_ntlm_brute_force.yml

2022-02-03 22:02:33 +01:00

printservice

move to builtin

2022-01-21 11:59:13 +01:00

security

Merge branch 'master' into aurora-false-positive-fixing

2022-03-20 17:59:58 +01:00

servicebus

move to builtin

2022-01-21 11:59:13 +01:00

smbclient

move to builtin

2022-01-21 11:59:13 +01:00

system

Update win_susp_service_installation_script.yml

2022-03-24 21:22:26 +01:00

taskscheduler

move to builtin

2022-01-21 11:59:13 +01:00

windefend

fix: unlikely --> Unlikely

2022-03-16 14:16:10 +01:00

wmi

fix: several FPs against a fresh installed Windows with example applications and basic user interaction 2

2022-02-10 16:12:17 +01:00

win_alert_mimikatz_keywords.yml

fix: remove penetration test as valid false positive reason

2022-03-16 14:33:18 +01:00