teddy_ROxPin bb17fd74ee Create win_advanced_ip_scanner.yml ...

Detects the use of Advanced IP Scanner. Seems to be a popular tool for ransomware groups.

2020-05-12 21:43:01 -06:00

..

builtin

win_susp_failed_logon_source rule

2020-05-06 22:24:02 +02:00

deprecated

Merge branch 'master' into oscd

2020-02-03 23:13:16 +01:00

malware

Changed level to ciritcal

2020-05-11 10:40:23 +02:00

other

fix: converted CRLF line break to LF

2020-03-25 14:36:34 +01:00

powershell

fix incorrect use of action global

2020-05-06 22:53:02 +02:00

process_creation

Create win_advanced_ip_scanner.yml

2020-05-12 21:43:01 -06:00

sysmon

Merge pull request #704 from Iveco/master

2020-04-14 14:11:27 +02:00