Florian Roth ef0cd4c110 Rules: Extended and fixed (*) sshd rules

2018-02-20 13:44:06 +01:00

..

application

Change All "str" references to be "list"to mach schema update

2018-01-28 02:24:16 +03:00

apt

Renamed rule - not APT32 related

2018-01-31 23:52:24 +01:00

linux

Rules: Extended and fixed (*) sshd rules

2018-02-20 13:44:06 +01:00

network

Added field names to first rules

2017-09-12 23:54:04 +02:00

proxy

Rule update: Proxy UA > Loki Bot

2018-02-12 10:08:32 +01:00

web

Change All "str" references to be "list"to mach schema update

2018-01-28 02:24:16 +03:00

windows

Detects successful logon with logon type 9 (NewCredentials) which matches the Overpass the Hash behavior of e.g Mimikatz's sekurlsa::pth module

2018-02-12 21:57:22 +01:00