Nate Guagenti e2050404bc prevent EventID collision for dhcp ...

This prevents EventID collision for this rule with other sources/logs that share the same EventIDs.
specifically a lot with Microsoft-Windows-Security-SPP

2019-07-16 15:30:52 -04:00

..

builtin

prevent EventID collision for dhcp

2019-07-16 15:30:52 -04:00

malware

Update win_mal_ursnif.yml

2019-04-14 11:51:13 -05:00

other

Converted to use the new process_creation data source

2019-03-09 20:57:59 +03:00

powershell

fixed typos

2019-06-29 15:35:59 +03:00

process_creation

fix: null value in separate expression

2019-07-02 20:14:45 +02:00

sysmon

Include Github raw URLs in suspicious downloads detection rule

2019-07-05 09:01:35 +00:00