Mohamed Ashraf
e873392366
Create Release / Create Release (push) Has been cancelled
update: Obfuscated IP Via CLI - increase coverage for more types of obfuscation and fix logic update: Obfuscated IP Download Activity - increase coverage for more types of obfuscation and fix logic update: Csc.EXE Execution Form Potentially Suspicious Parent - add more MS Office tools, suspicious locations and filter known FPs update: Dynamic .NET Compilation Via Csc.EXE - add more suspicious locations update: Malware User Agent - add new user agents --------- Co-authored-by: nasbench <8741929+nasbench@users.noreply.github.com> Co-authored-by: phantinuss <79651203+phantinuss@users.noreply.github.com>