frack113 931fb30853 old experimental rule promotion

2022-10-09 16:54:04 +02:00

..

sysmon_accessing_winapi_in_powershell_credentials_dumping.yml

New Rules + Update

2022-07-14 17:35:50 +01:00

sysmon_config_modification_error.yml

Reference Update [Batch 1]

2022-07-07 15:24:15 +01:00

sysmon_config_modification_status.yml

Filter start

2022-08-02 10:42:03 +02:00

sysmon_config_modification.yml

fix: FPs from new evtx-baseline

2022-09-21 13:51:19 +02:00

sysmon_dcom_iertutil_dll_hijack.yml

old experimental rule promotion

2022-10-09 16:54:04 +02:00

sysmon_file_block_exe.yml

fix: changes to existing rules

2022-09-13 08:07:03 +02:00

sysmon_process_hollowing.yml

Update incorrect mitre tags

2022-10-06 00:35:40 +02:00