yugoslavskiy 0966d24031 Merge pull request #1033 from JPMinty/oscd ...

Create rules-unsupported/win_remote_schtask.yml

2020-10-11 19:39:33 +02:00

..

net_dns_high_subdomain_rate.yml

UUIDs + moved unsupported logic

2019-12-19 23:56:36 +01:00

net_dns_large_domain_name.yml

UUIDs + moved unsupported logic

2019-12-19 23:56:36 +01:00

net_possible_dns_rebinding.yml

UUIDs + moved unsupported logic

2019-12-19 23:56:36 +01:00

sysmon_process_reimaging.yml

All Rules use 'TargetFilename' instead of 'TargetFileName'.

2020-06-03 09:00:59 +02:00

win_dumping_ntdsdit_via_dcsync.yml

UUIDs + moved unsupported logic

2019-12-19 23:56:36 +01:00

win_dumping_ntdsdit_via_netsync.yml

UUIDs + moved unsupported logic

2019-12-19 23:56:36 +01:00

win_remote_schtask.yml

Added selection criteria + moved to Unsupported rule

2020-10-11 12:48:48 +10:30

win_remote_service.yml

Added conditional description + moved to unsupported-rules

2020-10-11 12:40:24 +10:30