wagga40 11df697cdc Updated rules with modifiers instead of '*' and remove trailing '\\'

2021-06-27 14:51:29 +02:00

..

sysmon_cactustorch.yml

Merge branch 'master' of https://github.com/SigmaHQ/sigma

2021-04-15 01:25:48 +02:00

sysmon_cobaltstrike_process_injection.yml

- Remove 'service: sysmon' since defining the categories made the rules generic

2020-10-02 09:37:52 +02:00

sysmon_createremotethread_loadlibrary.yml

Update Threat Hunter Playbook Reference

2021-05-22 01:00:39 -03:00

sysmon_password_dumper_lsass.yml

convert to TargetImage|endswith

2021-06-21 20:51:26 +02:00

sysmon_susp_powershell_rundll32.yml

Merge branch 'master' of https://github.com/SigmaHQ/sigma

2021-04-15 01:25:48 +02:00

sysmon_suspicious_remote_thread.yml

Updated rules with modifiers instead of '*' and remove trailing '\\'

2021-06-27 14:51:29 +02:00