frack113 c43c12e557 split win_apt_turla_commands.yml

2021-09-19 11:17:50 +02:00

..

builtin

split win_apt_wocao.yml

2021-09-19 11:07:24 +02:00

create_remote_thread

fix condition operator case

2021-09-10 13:51:52 +02:00

create_stream_hash

Merging upstream updates

2021-07-01 12:18:30 +05:45

deprecated

Clean SyncAppvPublishingServer rules

2021-09-12 07:46:35 +02:00

dns_query

normalise name

2021-09-11 13:34:19 +02:00

driver_load

normalise name

2021-09-11 13:34:19 +02:00

file_delete

Update cve tags

2021-08-24 10:27:27 +02:00

file_event

split win_apt_unidentified_nov_18.yml

2021-09-19 11:11:04 +02:00

image_load

split win_exchange_transportagent.yml

2021-09-19 11:03:16 +02:00

malware

fix related

2021-09-11 14:22:01 +02:00

network_connection

update global id

2021-09-02 21:03:25 +02:00

other

Merge pull request #1979 from frack113/test_global

2021-09-06 08:44:14 +02:00

pipe_created

Various fixes

2021-09-07 23:38:07 +02:00

powershell

split global rules

2021-09-11 20:30:32 +02:00

process_access

Various fixes

2021-09-07 23:38:07 +02:00

process_creation

split win_apt_turla_commands.yml

2021-09-19 11:17:50 +02:00

raw_access_thread

Fix selection with only 1 element

2021-08-14 09:54:27 +02:00

registry_event

split win_mal_adwind.yml

2021-09-19 10:12:03 +02:00

sysmon

Merge pull request #2012 from frack113/upgrade_test

2021-09-11 15:29:19 +02:00

wmi_event

fix: tags for WMI / execution / persistence

2021-09-01 16:34:50 +02:00