Michael Haag 5ea6fad999 net.exe and wmic.exe ...

Suspicious execution of net and wmic

2017-03-25 06:48:23 -07:00

..

builtin

Bugfix: Wrong Event ID and extended description

2017-03-23 11:50:30 +01:00

other

Bugfix: Taskscheduler log source definition

2017-03-17 16:09:31 +01:00

powershell

Rules: PowerShell Downgrade Attacks

2017-03-22 11:17:46 +01:00

sysmon

net.exe and wmic.exe

2017-03-25 06:48:23 -07:00