Gude5 eb65a3f5c5 Update rules/windows/process_creation/proc_creation_win_remote_desktop_tunneling.yml ...

Co-authored-by: Nasreddine Bencherchali <8741929+nasbench@users.noreply.github.com>

2022-10-10 17:04:38 +02:00

..

builtin

Update rules/windows/builtin/security/win_security_service_installation_by_unusal_client.yml

2022-10-10 17:01:45 +02:00

create_remote_thread

fix: filter definition

2022-09-29 14:07:38 +02:00

create_stream_hash

refactor: JuicyPotatoNG imphashes

2022-10-06 08:30:48 +02:00

dns_query

Fix related

2022-10-09 17:28:05 +02:00

driver_load

Fix related

2022-10-09 17:28:05 +02:00

file_access

Fix FP In Testing

2022-10-07 13:26:33 +02:00

file_change

Update rules/windows/file_change/file_change_win_unusual_modification_by_dns_exe.yml

2022-10-10 17:01:59 +02:00

file_delete

Update rules/windows/file_delete/file_delete_win_webserver_access_logs_deleted.yml

2022-10-10 17:02:30 +02:00

file_event

Merge branch 'master' into master

2022-10-10 00:27:48 +02:00

file_rename

fix: more changes

2022-10-07 22:36:21 +02:00

image_load

Fix related

2022-10-09 17:28:05 +02:00

network_connection

old experimental rule promotion

2022-10-09 16:54:04 +02:00

pipe_created

Fix related

2022-10-09 17:28:05 +02:00

powershell

Merge branch 'master' into master

2022-10-10 00:27:48 +02:00

process_access

old experimental rule promotion

2022-10-09 16:54:04 +02:00

process_creation

Update rules/windows/process_creation/proc_creation_win_remote_desktop_tunneling.yml

2022-10-10 17:04:38 +02:00

raw_access_thread

…

registry

Fix related

2022-10-09 17:28:05 +02:00

sysmon

old experimental rule promotion

2022-10-09 16:54:04 +02:00

wmi_event

old experimental rule promotion

2022-10-09 16:54:04 +02:00