yugoslavskiy bdac415fea Merge pull request #486 from yugoslavskiy/tieto_oscd ...

[OSCD] Tieto DNS exfiltration rules

2019-11-10 19:36:02 +03:00

..

powershell_alternate_powershell_hosts.yml

added:

2019-10-24 15:48:38 +02:00

powershell_data_compressed.yml

Update powershell_data_compressed.yml

2019-11-05 02:38:36 +03:00

powershell_dnscat_execution.yml

add tieto dns exfiltration rules

2019-10-25 04:30:55 +02:00

powershell_downgrade_attack.yml

Tagged windows powershell, other and malware rules.

2018-07-24 10:56:41 +02:00

powershell_exe_calling_ps.yml

Tagged windows powershell, other and malware rules.

2018-07-24 10:56:41 +02:00

powershell_malicious_commandlets.yml

fix: bound keywords to field in multiple PS rules

2019-10-29 19:53:18 +01:00

powershell_malicious_keywords.yml

fix: bound keywords to field in multiple PS rules

2019-10-29 19:53:18 +01:00

powershell_ntfs_ads_access.yml

Merge branch 'master' of https://github.com/SherifEldeeb/sigma into SherifEldeeb-master

2018-12-04 23:35:23 +01:00

powershell_prompt_credentials.yml

fix: bound keywords to field in PS cred prompt rule

2019-10-29 19:43:04 +01:00

powershell_psattack.yml

fixed typos

2019-06-29 15:35:59 +03:00

powershell_remote_powershell_session.yml

oscd task #6 done.

2019-11-10 18:43:41 +03:00

powershell_shellcode_b64.yml

Added missing tags and some minor improvements

2019-03-05 23:25:49 +01:00

powershell_suspicious_download.yml

fix: bound keywords to field in multiple PS rules

2019-10-29 19:53:18 +01:00

powershell_suspicious_invocation_generic.yml

Tagged windows powershell, other and malware rules.

2018-07-24 10:56:41 +02:00

powershell_suspicious_invocation_specific.yml

fix: bound keywords to field in multiple PS rules

2019-10-29 19:53:18 +01:00

powershell_suspicious_keywords.yml

fix: change keyword and bound it to a field

2019-10-29 19:59:43 +01:00

powershell_winlogon_helper_dll.yml

Update powershell_winlogon_helper_dll.yml

2019-11-05 04:33:07 +03:00