Mohamed Ashraf 7e4748ec0e feat: update multiple rules (#5055) ...

* Update multiple rules

* updates

---------

Co-authored-by: nasbench <8741929+nasbench@users.noreply.github.com>

2024-10-25 16:32:03 +02:00

..

builtin

feat: update multiple rules (#5055)

2024-10-25 16:32:03 +02:00

create_remote_thread

Merge PR #5027 from @nasbench - Promote older rules status from experimental to test

2024-10-01 14:56:09 +02:00

create_stream_hash

feat: update multiple rules (#5055)

2024-10-25 16:32:03 +02:00

dns_query

Merge PR #5027 from @nasbench - Promote older rules status from experimental to test

2024-10-01 14:56:09 +02:00

driver_load

Merge PR #5027 from @nasbench - Promote older rules status from experimental to test

2024-10-01 14:56:09 +02:00

file

Merge PR #5038 from @Neo23x0 - Update LSASS Process Memory Dump Files

2024-10-08 21:57:25 +02:00

image_load

Merge PR #5031 from @swachchhanda000 - Add Potential Python DLL SideLoading

2024-10-06 22:51:09 +02:00

network_connection

feat: update multiple rules (#5055)

2024-10-25 16:32:03 +02:00

pipe_created

Merge PR #5036 from @dan21san - Update Alternate PowerShell Hosts Pipe

2024-10-08 22:17:21 +02:00

powershell

Merge PR #4994 from @djlukic - Multiple FP fixes

2024-10-08 23:08:50 +02:00

process_access

Merge PR #5027 from @nasbench - Promote older rules status from experimental to test

2024-10-01 14:56:09 +02:00

process_creation

feat: update multiple rules (#5055)

2024-10-25 16:32:03 +02:00

process_tampering

Merge PR #5027 from @nasbench - Promote older rules status from experimental to test

2024-10-01 14:56:09 +02:00

raw_access_thread

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

registry

feat: update multiple rules (#5055)

2024-10-25 16:32:03 +02:00

sysmon

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

wmi_event

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00