Florian Roth 31faadf5ce Merge pull request #3391 from SigmaHQ/rule-devel ...

Rule updates

2022-08-17 16:11:40 +02:00

..

create_remote_thread_win_susp_targets.yml

Merge pull request #3391 from SigmaHQ/rule-devel

2022-08-17 16:11:40 +02:00

create_remote_thread_win_ttdinjec.yml

…

sysmon_cactustorch.yml

…

sysmon_cobaltstrike_process_injection.yml

…

sysmon_createremotethread_loadlibrary.yml

…

sysmon_password_dumper_keepass.yml

…

sysmon_password_dumper_lsass.yml

…

sysmon_powershell_code_injection.yml

Update meta

2022-08-12 13:42:52 +01:00

sysmon_susp_powershell_rundll32.yml

New Rules + Update

2022-07-14 17:35:50 +01:00

sysmon_susp_remote_thread.yml

Update meta

2022-08-12 13:42:52 +01:00