Tobias Michalski e89867848d Update sysmon_mimikatz_trough_winrm.yml

2022-02-24 11:27:57 +01:00

..

sysmon_cmstp_execution_by_access.yml

remove invalid tag

2022-01-19 18:23:30 +01:00

sysmon_cobaltstrike_bof_injection_pattern.yml

…

sysmon_cred_dump_lsass_access.yml

remove invalid tag

2022-01-19 18:23:30 +01:00

sysmon_direct_syscall_ntopenprocess.yml

…

sysmon_in_memory_assembly_execution.yml

fix: single list items

2022-02-16 16:31:11 +01:00

sysmon_invoke_phantom.yml

remove invalid tag

2022-01-19 18:23:30 +01:00

sysmon_lazagne_cred_dump_lsass_access.yml

…

sysmon_littlecorporal_generated_maldoc.yml

…

sysmon_load_undocumented_autoelevated_com_interface.yml

…

sysmon_lsass_dump_comsvcs_dll.yml

…

sysmon_lsass_memdump_evasion.yml

docs: wording

2022-02-10 12:49:23 +01:00

sysmon_lsass_memdump_indicators.yml

docs: wording

2022-02-10 12:49:23 +01:00

sysmon_lsass_memdump.yml

fix: FPs noticed with Aurora

2022-02-12 00:40:10 +01:00

sysmon_malware_verclsid_shellcode.yml

…

sysmon_mimikatz_trough_winrm.yml

Update sysmon_mimikatz_trough_winrm.yml

2022-02-24 11:27:57 +01:00

sysmon_pypykatz_cred_dump_lsass_access.yml

…

sysmon_svchost_cred_dump.yml

…

sysmon_uac_bypass_wow64_logger.yml

…

win_susp_proc_access_lsass_susp_source.yml

Merge branch 'master' into aurora-false-positive-fixing

2022-02-21 18:49:45 +01:00

win_susp_proc_access_lsass.yml

Merge branch 'master' into aurora-false-positive-fixing

2022-02-21 18:49:45 +01:00