Swachchhanda Shrawan Poudel 2ee4323654 Merge PR #4679 from @swachchhanda000 - Suspicious unsigned DLL Loaded by RunDLL32/RegSvr32 ...

new: Unsigned DLL Loaded by RunDLL32/RegSvr32
---------

Co-authored-by: nasbench <8741929+nasbench@users.noreply.github.com>

2024-01-22 11:40:10 +01:00

..

builtin

Merge PR #4664 from @danielgottt - Windows Filtering Platform Blocked Connection From EDR Agent Binary

2024-01-11 08:56:17 +01:00

create_remote_thread

Merge PR #4564 from @nasbench - Fix Further FPs Found In Testing

2023-11-15 15:35:43 +01:00

create_stream_hash

Merge PR #4674 from @Neo23x0 - Increase hack tool coverage

2024-01-15 15:24:03 +01:00

dns_query

Merge PR #4628 from @ssnkhan - New: Detect Creation of Cloudflared Quick Tunnels

2023-12-21 12:32:08 +01:00

driver_load

Merge PR #4577 from @nasbench - Multiple Fixes & Updates

2023-12-21 21:04:18 +01:00

file

Merge PR #4662 from @nasbench - Updated and added new rules

2024-01-10 20:14:20 +01:00

image_load

Merge PR #4679 from @swachchhanda000 - Suspicious unsigned DLL Loaded by RunDLL32/RegSvr32

2024-01-22 11:40:10 +01:00

network_connection

Merge PR #4680 from @xiangchen96 - new domains from miningocean.org

2024-01-19 16:48:29 +01:00

pipe_created

Merge PR #4577 from @nasbench - Multiple Fixes & Updates

2023-12-21 21:04:18 +01:00

powershell

Merge PR #4663 from @slincoln-aiq - Update Disable Windows Defender Features Rules

2024-01-10 19:24:20 +01:00

process_access

Merge PR #4577 from @nasbench - Multiple Fixes & Updates

2023-12-21 21:04:18 +01:00

process_creation

Merge PR #4682 from @jstnk9 - Add new rules related to MODE.COM usage in changing code pages

2024-01-22 11:37:16 +01:00

process_tampering

Merge PR #4597 from @nasbench - Update Process Access Rules

2023-12-04 01:14:15 +01:00

raw_access_thread

Merge PR #4597 from @nasbench - Update Process Access Rules

2023-12-04 01:14:15 +01:00

registry

Merge PR #4673 from @Neo23x0 - Update broken reference link

2024-01-15 11:59:49 +01:00

sysmon

Merge PR #4482 From @nasbench - Add New Automation Workflows

2023-10-18 11:53:44 +02:00

wmi_event

Merge PR #4482 From @nasbench - Add New Automation Workflows

2023-10-18 11:53:44 +02:00