frack113 f27ddc8a0f Update rules/windows/image_load/image_load_susp_vss_dll_load.yml ...

Co-authored-by: Nasreddine Bencherchali <8741929+nasbench@users.noreply.github.com>

2022-10-31 19:33:13 +01:00

..

builtin

fix: new FP with Avast

2022-10-28 08:47:09 +02:00

create_remote_thread

Order yaml field

2022-10-25 12:00:56 +02:00

create_stream_hash

Order yaml field

2022-10-25 12:00:56 +02:00

dns_query

Order yaml field

2022-10-25 12:00:56 +02:00

driver_load

Order yaml field

2022-10-25 12:00:56 +02:00

file

new rules: Sigma rules based on Elastic rules (#3632)

2022-10-28 10:13:44 +02:00

image_load

Update rules/windows/image_load/image_load_susp_vss_dll_load.yml

2022-10-31 19:33:13 +01:00

network_connection

Order yaml field

2022-10-26 09:42:26 +02:00

pipe_created

Fix typo in selection

2022-10-27 00:12:58 +02:00

powershell

Add/Update Exchange/Mailbox Rules

2022-10-26 23:17:54 +02:00

process_access

Merge branch 'master' into fix-false-positives

2022-10-27 11:49:52 +02:00

process_creation

order yaml

2022-10-28 15:06:36 +02:00

raw_access_thread

Order yaml field

2022-10-25 12:00:56 +02:00

registry

Merge branch 'master' into nasbench-rule-devel

2022-10-26 10:39:55 +02:00

sysmon

Order yaml field

2022-10-25 12:00:56 +02:00

wmi_event

Order yaml field

2022-10-25 12:00:56 +02:00