Brad Kish d385cbfa69 Fix quoting for AD Object WriteDAC Access ...

The AccessMask field needs to be quoted so that it is compared correctly.

2020-06-22 15:31:03 -04:00

..

builtin

Fix quoting for AD Object WriteDAC Access

2020-06-22 15:31:03 -04:00

deprecated

fix: buggy rule

2020-05-23 18:32:02 +02:00

malware

Further subtechnique updates

2020-06-17 11:31:40 -06:00

other

Initial round of subtechnique updates

2020-06-16 14:46:08 -06:00

powershell

Initial round of subtechnique updates

2020-06-16 14:46:08 -06:00

process_creation

Update for new method

2020-06-22 01:06:34 +03:00

sysmon

Merge branch 'master' into rule-devel

2020-06-19 09:24:26 +02:00