Sittikorn S e16974522b Update sysmon_process_hollowing.yml ...

Update filters

2022-02-01 15:19:36 +07:00

..

sysmon_accessing_winapi_in_powershell_credentials_dumping.yml

Merge branch 'master' into falsepositives_NOT_a_list

2021-05-27 10:23:19 +02:00

sysmon_config_modification_error.yml

adding filter for false positive. no risk to sysmon operation

2021-12-02 20:38:58 +00:00

sysmon_config_modification_status.yml

Split global rules

2021-09-07 13:30:32 +02:00

sysmon_config_modification.yml

Update sysmon_config_modification.yml

2022-01-13 21:07:11 +01:00

sysmon_dcom_iertutil_dll_hijack.yml

Updated rules with modifiers instead of '*' and remove trailing '\\'

2021-06-27 14:51:29 +02:00

sysmon_process_hollowing.yml

Update sysmon_process_hollowing.yml

2022-02-01 15:19:36 +07:00