Andreas Hunkeler e8ee6aec2f Add further detections to shadow copies deletion ...

* Add diskshadow.exe to existing detection
* Add new detection for wbadmin.exe
* Fix typo in match on L31
* Add raccine refs

2021-06-02 15:47:41 +02:00

..

application

Fixed my git issue

2020-09-13 22:03:04 -06:00

apt

fixing test runner issues

2020-09-15 15:45:33 -06:00

cloud

Add AWS snapshot exfiltration rule

2021-05-17 13:00:01 -07:00

compliance

fix **firewall** is a category like in all other rules

2021-05-30 09:43:29 +02:00

generic

Fixed my git issue

2020-09-13 22:03:04 -06:00

linux

Fix auditd is a service

2021-05-30 08:58:25 +02:00

network

fix typo of falsepositives

2021-05-24 10:31:28 +02:00

proxy

rule: cobaltstrike malformed UAs

2021-05-10 12:43:14 +02:00

web

rule: nginx core dump

2021-05-31 10:49:42 +02:00

windows

Add further detections to shadow copies deletion

2021-06-02 15:47:41 +02:00