ecco cfde0625f5 fix false positive matching on every powershell process not run by SYSTEM account

2020-05-23 07:05:09 -04:00

..

application

fix: fixed casing and long rule titles

2020-01-30 17:26:09 +01:00

apt

fix: removed rules missing in master

2020-05-14 15:53:09 +02:00

cloud

capitalized titles

2020-05-05 11:32:18 +01:00

compliance

Added UUIDs to rules

2019-11-12 23:12:27 +01:00

generic

OSCD QA wave 3

2020-02-02 12:41:12 +01:00

linux

rule: OpenSSHd rule adjusted

2020-05-15 17:19:32 +02:00

network

small T, big T

2020-05-19 05:13:48 -04:00

proxy

domain user enumeration via zeek rpc (dce_rpc) log.

2020-05-19 05:08:26 -04:00

web

use the taxonomy for http response which is sc-status

2020-03-14 15:02:33 -04:00

windows

fix false positive matching on every powershell process not run by SYSTEM account

2020-05-23 07:05:09 -04:00