MetaOSINT ba52dc2aa8 T1539 Steal Web Session Cookie rules ...

Update existing rule and add one new rule related to Steal Web Session Cookie technique (T1539)

2022-12-19 23:20:13 -05:00

..

builtin

fix: update title

2022-12-14 23:12:23 +01:00

create_remote_thread

Refractor (#3794)

2022-12-18 21:00:14 +01:00

create_stream_hash

Merge pull request #3757 from SigmaHQ/aurora-false-positive-fixing

2022-12-05 18:54:31 +01:00

dns_query

Update title (#3734)

2022-11-29 07:36:45 +01:00

driver_load

feat: updates and enhancements

2022-12-16 16:52:12 +01:00

file

fix: rename files to fit logic

2022-12-19 19:28:23 +01:00

image_load

fix: rename files to fit logic

2022-12-19 19:28:23 +01:00

network_connection

fix: remove unnecessary definition

2022-12-18 15:24:58 +01:00

pipe_created

refactor: remove unnesessary escape.

2022-12-03 21:56:00 +09:00

powershell

fix: enhance logic and severity

2022-12-19 11:21:24 +01:00

process_access

Refractor (#3794)

2022-12-18 21:00:14 +01:00

process_creation

T1539 Steal Web Session Cookie rules

2022-12-19 23:20:13 -05:00

raw_access_thread

feat: enhance duplicate test (#3736)

2022-11-29 13:47:09 +01:00

registry

fix: list with one element issue

2022-12-14 13:23:28 +01:00

sysmon

Refractor (#3794)

2022-12-18 21:00:14 +01:00

wmi_event

Order yaml field

2022-10-25 12:00:56 +02:00