Ensar Şamil dec7568d4c Rule simplification ...

Two selection fields are reduced to one. HKCU and HKLM registry value changes are considered, thus wildcards are added. No change at details.

2018-09-28 10:58:50 +03:00

..

builtin

Add group by to win multiple suspicious cli rule

2018-09-23 19:38:23 +02:00

malware

ATT&CK tagging QA

2018-09-20 12:44:44 +02:00

other

Tagged windows powershell, other and malware rules.

2018-07-24 10:56:41 +02:00

powershell

Lower case T

2018-09-26 11:44:12 +02:00

sysmon

Rule simplification

2018-09-28 10:58:50 +03:00