Florian Roth 9835950f04 rule: SID to AD object rule level adjusted

2019-11-09 12:49:54 +01:00

..

builtin

rule: SID to AD object rule level adjusted

2019-11-09 12:49:54 +01:00

malware

rules: AV rules updated to reflect 1.7.2 auf AV cheat sheet

2019-10-04 16:17:34 +02:00

other

fix: bound keywords to field in WMI persistence rule

2019-10-29 19:22:41 +01:00

powershell

Merge pull request #508 from Karneades/fixRule3

2019-10-29 22:34:08 +01:00

process_creation

fix: fixed false positive in suspicious shell spawn rule

2019-11-09 10:45:46 +01:00

sysmon

fix: bound sysmon logon script rule to field

2019-11-02 11:47:20 +01:00