frack113 0c61fffa82 Merge pull request #3915 from frack113/appxdeployment ...

Add appxdeployment-server rule by eventid

2023-01-12 18:53:32 +01:00

..

application

fix: add new ref

2023-01-12 18:37:35 +01:00

applocker

Order yaml field

2022-10-25 11:08:51 +02:00

appxdeployment_server

Update win_appxdeployment_server_applocker_block.yml

2023-01-12 18:47:14 +01:00

bits_client

feat: updates and enhancements

2023-01-11 01:03:52 +01:00

code_integrity

feat: filename test enhancements (#3812)

2022-12-23 09:25:16 +01:00

diagnosis/scripted

Order yaml field

2022-10-25 11:08:51 +02:00

dns_server

Filename normalisation

2023-01-07 08:52:11 +01:00

dns_server_analytic

Update from review

2023-01-02 12:05:54 +01:00

driverframeworks

feat: proxynotshell owa variant rules

2022-12-22 12:10:29 +01:00

firewall_as

fix: new FPs found in testing environment

2022-11-01 16:19:14 +01:00

ldap

feat: add new reference

2022-12-28 16:17:46 +01:00

msexchange

fix: broken selections

2023-01-06 17:28:29 +01:00

ntlm

Order yaml field

2022-10-25 11:08:51 +02:00

openssh

Change rule service

2022-10-25 20:03:11 +02:00

printservice

fix: remove non existent eid and fix #2744

2022-11-15 22:58:19 +01:00

security

feat: updates and enhancements

2023-01-11 01:03:52 +01:00

security_mitigations

update modified tag

2022-09-28 06:32:34 +09:00

servicebus

old experimental rule promotion

2022-10-09 16:54:04 +02:00

shell_core

Order yaml field

2022-10-25 11:08:51 +02:00

smbclient

Update field name

2023-01-02 15:49:45 +01:00

system

update logsource

2023-01-04 18:52:24 +01:00

taskscheduler

feat: filename test enhancements (#3812)

2022-12-23 09:25:16 +01:00

terminalservices

Order yaml field

2022-10-25 11:08:51 +02:00

windefend

Promotion rules (#3821)

2022-12-27 12:29:10 +01:00

wmi

Order yaml field

2022-10-25 11:08:51 +02:00

win_alert_mimikatz_keywords.yml

Order yaml field

2022-10-25 11:08:51 +02:00