phantinuss b7f20b884c fix: FPs from new evtx-baseline

2022-09-21 13:51:19 +02:00

..

sysmon_accessing_winapi_in_powershell_credentials_dumping.yml

New Rules + Update

2022-07-14 17:35:50 +01:00

sysmon_config_modification_error.yml

Reference Update [Batch 1]

2022-07-07 15:24:15 +01:00

sysmon_config_modification_status.yml

Filter start

2022-08-02 10:42:03 +02:00

sysmon_config_modification.yml

fix: FPs from new evtx-baseline

2022-09-21 13:51:19 +02:00

sysmon_dcom_iertutil_dll_hijack.yml

Updated rules with modifiers instead of '*' and remove trailing '\\'

2021-06-27 14:51:29 +02:00

sysmon_file_block_exe.yml

fix: changes to existing rules

2022-09-13 08:07:03 +02:00

sysmon_process_hollowing.yml

Update filter

2022-02-02 06:34:32 +01:00