Austin Songer c4153f471f Create win_susp_rclone_exec.yml

2021-10-24 11:02:55 -05:00

..

powershell_suspicious_download.yml

move to deprecated

2021-10-18 14:12:10 +02:00

powershell_suspicious_invocation_generic.yml

move to deprecated

2021-10-18 14:12:10 +02:00

powershell_suspicious_invocation_specific.yml

move to deprecated

2021-10-18 14:12:10 +02:00

powershell_syncappvpublishingserver_exe.yml

move to deprecated

2021-10-18 14:12:10 +02:00

process_creation_syncappvpublishingserver_exe.yml

Clean SyncAppvPublishingServer rules

2021-09-12 07:46:35 +02:00

sysmon_mimikatz_detection_lsass.yml

fix category and TargetImage|endswith

2021-06-21 21:06:54 +02:00

sysmon_rclone_execution.yml

Create sysmon_rclone_execution.yml

2021-10-24 11:02:34 -05:00

win_susp_esentutl_activity.yml

fix: buggy rule

2020-05-23 18:32:02 +02:00

win_susp_rclone_exec.yml

Create win_susp_rclone_exec.yml

2021-10-24 11:02:55 -05:00

win_susp_vssadmin_ntds_activity.yml

Merge branch 'master' into oscd

2020-02-03 23:13:16 +01:00