schatzimangou 612f66e8a0 Msiexec update in sigma rules

2022-10-24 08:18:25 +02:00

..

application

Msiexec update in sigma rules

2022-10-24 08:18:25 +02:00

applocker

Update win_applocker_file_was_not_allowed_to_run.yml

2022-08-05 15:34:41 +01:00

bits_client

refactor: added transfer.sh domain

2022-08-24 16:51:26 +02:00

code_integrity

move to builtin

2022-01-21 11:59:13 +01:00

diagnosis/scripted

Change service to diagnosis scripted

2022-08-15 12:45:12 +01:00

dns_server

Fix related

2022-10-09 17:28:05 +02:00

driverframeworks

move to builtin

2022-01-21 11:59:13 +01:00

firewall_as

fix: FPs on test machine

2022-10-18 16:39:04 +02:00

ldap

old experimental rule promotion

2022-10-09 16:54:04 +02:00

msexchange

Fix related

2022-10-09 17:28:05 +02:00

ntlm

Update Wildcard + Int to Str fields

2022-10-05 23:15:20 +02:00

printservice

old experimental rule promotion

2022-10-09 16:54:04 +02:00

security

Update win_security_susp_possible_shadow_credentials_added.yml

2022-10-19 19:06:00 +02:00

security_mitigations

update modified tag

2022-09-28 06:32:34 +09:00

servicebus

old experimental rule promotion

2022-10-09 16:54:04 +02:00

shell_core

Update win_shell_core_susp_packages_installed.yml

2022-08-15 00:32:18 +01:00

smbclient

old experimental rule promotion

2022-10-09 16:54:04 +02:00

system

fix: fix typos found by new check

2022-10-21 17:29:34 +02:00

taskscheduler

fix: several issues

2022-05-12 17:30:30 +02:00

terminalservices

fix: description

2022-04-29 13:10:36 +02:00

windefend

old experimental rule promotion

2022-10-09 16:54:04 +02:00

wmi

fix: several FPs against a fresh installed Windows with example applications and basic user interaction 2

2022-02-10 16:12:17 +01:00

win_alert_mimikatz_keywords.yml

refactor: rule adjustments based on hayabusa

2022-06-18 08:39:02 +02:00