frack113 4149fa8632 change to category: ps_classic_*

2021-10-16 08:26:51 +02:00

..

powershell_classic

change to category: ps_classic_*

2021-10-16 08:26:51 +02:00

powershell_module

Change to category: ps_module

2021-10-16 08:05:15 +02:00

powershell_script

change to category: ps_script

2021-10-16 08:18:49 +02:00

powershell_suspicious_download.yml

split powershell_suspicious_download.yml

2021-09-21 09:46:02 +02:00

powershell_suspicious_invocation_generic.yml

added missing ATT&CK v6.3 IDs with comments and removed unnecessary "modified" attributes

2020-08-25 23:51:22 +00:00

powershell_suspicious_invocation_specific.yml

Update PS rules

2021-08-21 09:50:59 +02:00

powershell_syncappvpublishingserver_exe.yml

split global rules

2021-09-11 20:30:32 +02:00