ecco cfde0625f5 fix false positive matching on every powershell process not run by SYSTEM account

2020-05-23 07:05:09 -04:00

..

builtin

Update win_alert_ad_user_backdoors.yml

2020-05-19 14:50:22 +02:00

deprecated

Merge branch 'master' into oscd

2020-02-03 23:13:16 +01:00

malware

Changed level to ciritcal

2020-05-11 10:40:23 +02:00

other

fix: converted CRLF line break to LF

2020-03-25 14:36:34 +01:00

powershell

fix incorrect use of action global

2020-05-06 22:53:02 +02:00

process_creation

Merge pull request #788 from Neo23x0/rule-devel

2020-05-23 09:54:43 +02:00

sysmon

fix false positive matching on every powershell process not run by SYSTEM account

2020-05-23 07:05:09 -04:00