Nasreddine Bencherchali dcf236fede Quick Updates and Fixes ...

- Added "Invoke-EventViewer.ps1" script to the rule "file_event_win_powershell_exploit_scripts"
- Added "OriginalFileName" to "proc_creation_win_susp_taskkill"
- Created rule for "winword" being used as a LOLBIN to download and load arbitrary DLLs

2022-05-18 12:50:59 +01:00

..

application

fix: several issues

2022-05-12 17:30:30 +02:00

apt

remove invalid tag

2022-01-19 18:23:30 +01:00

cloud

chore: test rules: reactivate single value list check

2022-05-10 17:13:04 +02:00

compliance

chore: test rules: reactivate single value list check

2022-05-10 17:13:04 +02:00

linux

chore: test rules: reactivate single value list check

2022-05-10 17:13:04 +02:00

macos

chore: test rules: reactivate single value list check

2022-05-10 17:13:04 +02:00

network

Merge pull request #3001 from redsand/fp_zeek_add_ip6_non_routable

2022-05-11 16:48:23 +02:00

proxy

Merge pull request #2998 from redsand/spotify_co_for_bits_admin

2022-05-12 13:02:48 +02:00

web

chore: test rules: reactivate single value list check

2022-05-10 17:13:04 +02:00

windows

Quick Updates and Fixes

2022-05-18 12:50:59 +01:00