frack113 e52edb69c4 Merge pull request #4039 from fornotes/master ...

Added New Rule for LPE via StorSvc DLL Hijack

2023-02-15 19:18:39 +01:00

..

builtin

fix: typos and improve wording

2023-02-08 10:29:48 +01:00

create_remote_thread

fix: resolves #4015

2023-02-07 14:33:56 +01:00

create_stream_hash

fix: change title from domain to wbesites

2023-02-10 10:49:52 +01:00

dns_query

fix: typos in multiple rules (#4011)

2023-02-06 13:53:23 +01:00

driver_load

fix: typos in multiple rules (#4011)

2023-02-06 13:53:23 +01:00

file

fix: update title

2023-02-15 19:11:39 +01:00

image_load

feat: update rules related to onenote and more

2023-02-10 00:40:16 +01:00

network_connection

fix: resolves #4015

2023-02-07 14:33:56 +01:00

pipe_created

fix: resolves #4015

2023-02-07 14:33:56 +01:00

powershell

fix: resolves #4015

2023-02-07 14:33:56 +01:00

process_access

fix: reduce author set

2023-02-01 14:34:46 +01:00

process_creation

feat: add localpotato binary rule

2023-02-14 19:57:26 +01:00

raw_access_thread

fix: more fp found in testing

2023-01-18 20:16:34 +01:00

registry

fix: duplicate titles

2023-02-09 16:06:09 +01:00

sysmon

fix: typos in multiple rules (#4011)

2023-02-06 13:53:23 +01:00

wmi_event

chore: add nextron authors tag

2023-02-01 11:14:59 +01:00