Nasreddine Bencherchali e824131450 fix: add new ref

2023-01-12 18:37:35 +01:00

..

win_audit_cve.yml

Order yaml field

2022-10-25 11:08:51 +02:00

win_av_relevant_match.yml

Order yaml field

2022-10-25 11:08:51 +02:00

win_builtin_remove_application.yml

Order yaml field

2022-10-25 11:08:51 +02:00

win_esent_ntdsutil_abuse_susp_location.yml

Order yaml field

2022-10-25 11:08:51 +02:00

win_esent_ntdsutil_abuse.yml

Order yaml field

2022-10-25 11:08:51 +02:00

win_msi_install_from_susp_locations.yml

fix: more fp found in testing and enhance fp metadata

2022-12-13 11:25:23 +01:00

win_msi_install_from_web.yml

Order yaml field

2022-10-25 11:08:51 +02:00

win_mssql_add_sysadmin_account.yml

Order yaml field

2022-10-25 11:08:51 +02:00

win_mssql_disable_audit_settings.yml

Order yaml field

2022-10-25 11:08:51 +02:00

win_mssql_sp_maggie.yml

Order yaml field

2022-10-25 11:08:51 +02:00

win_mssql_sp_procoption_set.yml

Order yaml field

2022-10-25 11:08:51 +02:00

win_mssql_xp_cmdshell_audit_log.yml

Order yaml field

2022-10-25 11:08:51 +02:00

win_mssql_xp_cmdshell_change.yml

Order yaml field

2022-10-25 11:08:51 +02:00

win_software_atera_rmm_agent_install.yml

Promotion rules (#3821)

2022-12-27 12:29:10 +01:00

win_software_restriction_policies_block.yml

fix: add new ref

2023-01-12 18:37:35 +01:00

win_susp_backup_delete.yml

Promotion rules (#3821)

2022-12-27 12:29:10 +01:00

win_susp_msmpeng_crash.yml

Order yaml field

2022-10-25 11:08:51 +02:00

win_vul_cve_2020_0688.yml

Promotion rules (#3821)

2022-12-27 12:29:10 +01:00

win_vul_cve_2021_41379.yml

Order yaml field

2022-10-25 11:08:51 +02:00

win_werfault_susp_lsass_credential_dump.yml

feat: update Lsass-Shtinkering rules

2022-12-09 12:22:50 +01:00