Swachchhanda Shrawan Poudel cf9759946f Merge PR #5399 from @swachchhanda000 - Update LSA PPL Protection Setting Modification via CommandLine ...

update: LSA PPL Protection Setting Modification via CommandLine - Add more keys regarding LSA PPL

---------

Co-authored-by: phantinuss <79651203+phantinuss@users.noreply.github.com>
Co-authored-by: Nasreddine Bencherchali <monsteroffire2@gmail.com>

2026-04-24 19:48:55 +02:00

..

builtin

Merge PR #5914 from @netikus - Update Potential Privileged System Service Operation - SeLoadDriverPrivilege

2026-04-01 13:36:52 +02:00

create_remote_thread

Merge #5798 from @swachchhanda000 - fix: aurora fps

2025-12-09 08:21:14 +05:45

create_stream_hash

Merge PR #5804 from @swachchhanda000 - enhance rules related with file download from file sharing websites

2025-12-12 08:04:27 +05:45

dns_query

Merge PR #5905 from @swachchhanda000 - fix: notepad++ gup infrastructure abuse FPs

2026-04-21 12:33:55 +02:00

driver_load

chore: ci: bump validator version (#5722)

2025-10-23 15:43:47 +02:00

file

Merge PR #5922 from @CHIRAG-DAMANI-08 - Hacktool - NetExec Execution

2026-04-23 15:02:24 +02:00

image_load

Merge PR #5832 from @swachchhanda000 - fix: edr-freeze rules FPs analysed from VT

2026-03-19 10:26:30 +01:00

network_connection

Merge PR #5804 from @swachchhanda000 - enhance rules related with file download from file sharing websites

2025-12-12 08:04:27 +05:45

pipe_created

chore: ci: bump validator version (#5722)

2025-10-23 15:43:47 +02:00

powershell

Merge PR #5433 from @swachchhanda000 - Add BadSuccessor dMSA Abuse Related Rules

2026-03-30 12:27:13 +02:00

process_access

Merge PR #5777 from @swachchhanda000 - feat: more edrfreeze rules

2025-12-10 15:29:38 +01:00

process_creation

Merge PR #5399 from @swachchhanda000 - Update LSA PPL Protection Setting Modification via CommandLine

2026-04-24 19:48:55 +02:00

process_tampering

Merge PR #5027 from @nasbench - Promote older rules status from experimental to test

2024-10-01 14:56:09 +02:00

raw_access_thread

Merge PR #5789 from @swachchhanda000 - Add fps filter observed on ARM-based Windows updates

2025-12-09 08:29:51 +05:45

registry

Merge PR #5935 from @swachchhanda000 - Fix Registry Tampering by Potentially Suspicious Processes

2026-04-14 14:49:20 +02:00

sysmon

Merge PR #5775 from @swachchhanda000 - Restructure regression testing data directory

2025-11-26 11:08:11 +01:00

wmi_event

Merge PR #5769 from @nasbench - fix keywords rule and remove the fields field

2025-11-24 09:54:29 +01:00