Swachchhanda Shrawan Poudel fc1cf467f4 Merge PR #5905 from @swachchhanda000 - fix: notepad++ gup infrastructure abuse FPs ...

fix: Notepad++ Updater DNS Query to Uncommon Domains - filter uncommon domain
fix: Uncommon File Created by Notepad++ Updater Gup.EXE - filter gup legitimate filter

2026-04-21 12:33:55 +02:00

..

dns_query_win_anonymfiles_com.yml

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

dns_query_win_appinstaller.yml

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

dns_query_win_cloudflared_communication.yml

Merge PR #5579 from @Liran017 - Update MITRE ATT&CK tags for multiple rules

2025-08-14 14:08:21 +02:00

dns_query_win_common_malware_hosting_services.yml

Merge PR #5453 from @egycondor - DNS Query To Common Malware Hosting and Shortener Services

2025-06-12 12:31:03 +02:00

dns_query_win_devtunnels_communication.yml

Merge PR #5579 from @Liran017 - Update MITRE ATT&CK tags for multiple rules

2025-08-14 14:08:21 +02:00

dns_query_win_dns_server_discovery_via_ldap_query.yml

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

dns_query_win_domain_azurewebsites.yml

Merge PR #5477 from @phantinuss - chore: update MITRE tag t1219 to t1219.002

2025-06-13 10:00:52 +02:00

dns_query_win_finger.yml

Merge PR #5763 from @swachchhanda000 - Update ClickFix/FileFix related rules

2025-11-27 23:00:25 +01:00

dns_query_win_gup_query_to_uncommon_domains.yml

Merge PR #5905 from @swachchhanda000 - fix: notepad++ gup infrastructure abuse FPs

2026-04-21 12:33:55 +02:00

dns_query_win_hybridconnectionmgr_servicebus.yml

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

dns_query_win_kerberos_coercion_via_dns_object_spoofing.yml

chore: ci: bump validator version (#5722)

2025-10-23 15:43:47 +02:00

dns_query_win_mal_cobaltstrike.yml

Merge PR #5769 from @nasbench - fix keywords rule and remove the fields field

2025-11-24 09:54:29 +01:00

dns_query_win_mega_nz.yml

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

dns_query_win_onelaunch_update_service.yml

chore: ci: bump validator version (#5722)

2025-10-23 15:43:47 +02:00

dns_query_win_quickassist.yml

Merge PR #5452 from @david-syk - Update the MITRE ATT&CK tags for multiple rules

2025-06-04 14:39:25 +02:00

dns_query_win_regsvr32_dns_query.yml

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

dns_query_win_remote_access_software_domains_non_browsers.yml

Merge PR #5477 from @phantinuss - chore: update MITRE tag t1219 to t1219.002

2025-06-13 10:00:52 +02:00

dns_query_win_susp_external_ip_lookup.yml

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

dns_query_win_teamviewer_domain_query_by_uncommon_app.yml

Merge PR #5477 from @phantinuss - chore: update MITRE tag t1219 to t1219.002

2025-06-13 10:00:52 +02:00

dns_query_win_tor_onion_domain_query.yml

Merge PR #5664 from @ norbert791 - update DNS detections

2025-10-01 10:00:15 +02:00

dns_query_win_ufile_io_query.yml

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

dns_query_win_vscode_tunnel_communication.yml

Merge PR #5746 from @deftoner - improve logsource format

2025-11-21 12:13:42 +01:00