Aidan Bracher dcf20e580d Updated tags to include sub-techniques

2020-07-18 02:50:57 +01:00

..

sysmon_dllhost_net_connections.yml

changed newline character to LF

2020-07-15 16:46:44 +02:00

sysmon_malware_backconnect_ports.yml

Changed category names and remove sysmon log source

2020-06-24 17:41:21 +02:00

sysmon_notepad_network_connection.yml

Changed category names and remove sysmon log source

2020-06-24 17:41:21 +02:00

sysmon_powershell_network_connection.yml

Updated tags to include sub-techniques

2020-07-18 02:50:57 +01:00

sysmon_rdp_reverse_tunnel.yml

Changed category names and remove sysmon log source

2020-06-24 17:41:21 +02:00

sysmon_regsvr32_network_activity.yml

Introduced dns_query log source category

2020-07-05 23:29:51 +02:00

sysmon_remote_powershell_session_network.yml

Updated tags to include sub-techniques

2020-07-18 02:50:57 +01:00

sysmon_rundll32_net_connections.yml

Changed category names and remove sysmon log source

2020-06-24 17:41:21 +02:00

sysmon_susp_prog_location_network_connection.yml

Changed category names and remove sysmon log source

2020-06-24 17:41:21 +02:00

sysmon_susp_rdp.yml

Changed category names and remove sysmon log source

2020-06-24 17:41:21 +02:00

sysmon_suspicious_outbound_kerberos_connection.yml

Changed category names and remove sysmon log source

2020-06-24 17:41:21 +02:00

sysmon_win_binary_github_com.yml

Changed category names and remove sysmon log source

2020-06-24 17:41:21 +02:00

sysmon_win_binary_susp_com.yml

Changed category names and remove sysmon log source

2020-06-24 17:41:21 +02:00