Zandmann f001d35c8b Update and rename BPFDoor_abnormal_process_id_or_lock_file_accessed.yml to lnx_auditd_BPFDoor_file_accessed.yml

2022-08-11 18:59:58 +02:00

..

auditd

Update and rename BPFDoor_abnormal_process_id_or_lock_file_accessed.yml to lnx_auditd_BPFDoor_file_accessed.yml

2022-08-11 18:59:58 +02:00

builtin

Update rules (desc, selection, logic)

2022-08-04 18:08:08 +01:00

file_create

Update Ref+Selection 3

2022-07-11 18:12:51 +01:00

modsecurity

add missing tags

2021-09-07 18:16:46 +02:00

network_connection

refactor: remove rules for false alarm

2022-08-04 20:05:16 +02:00

other

Reference Update [Batch 1]

2022-07-07 15:24:15 +01:00

process_creation

Update proc_creation_lnx_webshell_detection.yml

2022-08-01 23:40:34 +01:00