netikus 7031934d17 Merge PR #5914 from @netikus - Update Potential Privileged System Service Operation - SeLoadDriverPrivilege ...

fix: Potential Privileged System Service Operation - SeLoadDriverPrivilege - Add new filter for ShellHost.exe and SystemSettings.exe

---------

Co-authored-by: Swachchhanda Shrawan Poudel <87493836+swachchhanda000@users.noreply.github.com>
Co-authored-by: Nasreddine Bencherchali <monsteroffire2@gmail.com>

2026-04-01 13:36:52 +02:00

..

application

Merge PR #5790 from @nasbench - Metadata Updates

2025-12-24 17:50:21 +01:00

applocker

Merge PR #5790 from @nasbench - Metadata Updates

2025-12-24 17:50:21 +01:00

appmodel_runtime

Merge PR #5790 from @nasbench - Metadata Updates

2025-12-24 17:50:21 +01:00

appxdeployment_server

Merge PR #5741 from @swachchhanda000 - Add Splunk Rules for MSIX/AppX

2026-01-24 17:04:41 +01:00

appxpackaging_om

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

bits_client

Merge PR #5885 from @djlukic - Add New FP Filters

2026-03-01 03:47:59 +01:00

capi2

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

certificate_services_client_lifecycle_system

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

code_integrity

Merge PR #5885 from @djlukic - Add New FP Filters

2026-03-01 03:47:59 +01:00

diagnosis/scripted

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

dns_client

Merge PR #5740 from @swachchhanda000 - chore: reorganize threat specific rules into rules-emerging-threats directory

2025-11-10 12:00:08 +01:00

dns_server

chore: ci: bump validator version (#5722)

2025-10-23 15:43:47 +02:00

driverframeworks

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

firewall_as

Merge PR #5679 from @swachchhanda000 - chore: update evtx baseline to v0.8.2

2025-10-09 13:03:39 +02:00

iis-configuration

Merge PR #5637 from @nasbench - Promote older rules status from experimental to test

2025-09-22 11:41:37 +02:00

ldap

Merge PR #5513 from @swachchhanda000 - fix FPs observed via Aurora

2025-07-08 10:29:01 +02:00

lsa_server

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

msexchange

Merge PR #5769 from @nasbench - fix keywords rule and remove the fields field

2025-11-24 09:54:29 +01:00

ntlm

Merge PR #5769 from @nasbench - fix keywords rule and remove the fields field

2025-11-24 09:54:29 +01:00

openssh

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

security

Merge PR #5914 from @netikus - Update Potential Privileged System Service Operation - SeLoadDriverPrivilege

2026-04-01 13:36:52 +02:00

security_mitigations

chore: ci: bump validator version (#5722)

2025-10-23 15:43:47 +02:00

servicebus

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

shell_core

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

smbclient/security

Merge PR #5769 from @nasbench - fix keywords rule and remove the fields field

2025-11-24 09:54:29 +01:00

smbserver/connectivity

Merge PR #5686 from @mm-abdelghani - Unsigned or Unencrypted SMB Connection to Share Established

2025-10-23 13:43:15 +02:00

system

Merge PR #5769 from @nasbench - fix keywords rule and remove the fields field

2025-11-24 09:54:29 +01:00

taskscheduler

chore: ci: bump validator version (#5722)

2025-10-23 15:43:47 +02:00

terminalservices

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

windefend

Merge PR #5022 from @jaegeral - Fix some typos in rules metadata

2024-09-22 19:14:26 +02:00

wmi

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

win_alert_mimikatz_keywords.yml

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00