Brad Kish 4b31633355 Fixes for rules in new sysmon registry_event category ...

To be consistent with the behaviour of the other rules, the eventID should not
be specified as part of the rule. The category defines the eventID.

2020-07-03 16:20:37 -04:00

..

builtin

Merge branch 'master' of https://github.com/4A616D6573/sigma into pr-785

2020-07-02 23:04:59 +02:00

deprecated

fix: buggy rule

2020-05-23 18:32:02 +02:00

driver_load

fix: bugfix and cosmetics

2020-06-24 18:10:58 +02:00

file_event

docs: more references

2020-07-03 13:19:44 +02:00

image_load

refactor: sysmon rule cleanup > generlization

2020-07-01 10:58:39 +02:00

malware

Further subtechnique updates

2020-06-17 11:31:40 -06:00

network_connection

refactor: sysmon rule cleanup > generlization

2020-07-01 10:58:39 +02:00

other

FIX: lint error for title

2020-06-28 11:05:19 +02:00

powershell

Added new rule for pwsh_xor_cmd

2020-06-29 22:09:58 +02:00

process_access

fix: broken links

2020-07-03 11:22:06 +02:00

process_creation

fix: trailing white space

2020-07-03 17:59:50 +02:00

registry_event

Fixes for rules in new sysmon registry_event category

2020-07-03 16:20:37 -04:00

sysmon

fix: broken links

2020-07-03 11:22:06 +02:00