Jonhnathan dde5b46726 Update win_susp_sam_dump.yml

2020-10-27 22:01:31 -03:00

..

builtin

Update win_susp_sam_dump.yml

2020-10-27 22:01:31 -03:00

deprecated

fix: buggy rule

2020-05-23 18:32:02 +02:00

driver_load

Update sysmon_susp_driver_load.yml

2020-10-15 15:57:05 -03:00

file_event

Update sysmon_tsclient_filewrite_startup.yml

2020-10-15 16:02:52 -03:00

image_load

Update sysmon_svchost_dll_search_order_hijack.yml

2020-10-15 16:10:23 -03:00

malware

Fix

2020-10-15 20:27:10 -03:00

network_connection

Update sysmon_win_binary_susp_com.yml

2020-10-15 16:27:01 -03:00

other

Fix

2020-10-15 20:29:02 -03:00

powershell

Update powershell_malicious_commandlets.yml

2020-10-15 20:59:27 -03:00

process_access

Update sysmon_malware_verclsid_shellcode.yml

2020-10-15 17:19:06 -03:00

process_creation

Revert "Revert "Changed the rule to download only and not the copy""

2020-10-16 11:05:51 -03:00

registry_event

Update sysmon_susp_service_installed.yml

2020-10-15 20:50:42 -03:00

sysmon

Update sysmon_wmi_susp_scripting.yml

2020-10-15 20:15:22 -03:00