Tareq AlKhatib 2e3a2b9ba6 Merged 'Eventlog Cleared' and 'Eventlog Cleared Experimental'

2019-02-18 21:03:53 +03:00

..

builtin

Merged 'Eventlog Cleared' and 'Eventlog Cleared Experimental'

2019-02-18 21:03:53 +03:00

malware

Escaped '\*' to '\\*' where required

2019-02-03 00:24:57 +01:00

other

Rule: WMI Persistence - FPs

2019-02-05 14:35:23 +01:00

powershell

Rule: Suspicious PowerShell keywords

2019-02-11 13:02:38 +01:00

sysmon

Removed unnecessary '1 of them' in condition

2019-02-13 21:26:02 +03:00