BlueTeamOps fcd41ed3e3 Update rules/windows/process_creation/proc_creation_win_iis_service_account_password_dumped.yml ...

Co-authored-by: Nasreddine Bencherchali <8741929+nasbench@users.noreply.github.com>

2022-11-19 15:06:36 +11:00

..

builtin

Fix FP

2022-11-07 12:11:30 +01:00

create_remote_thread

Order yaml field

2022-10-25 12:00:56 +02:00

create_stream_hash

Add browsers

2022-10-31 20:57:22 +01:00

dns_query

Add browsers

2022-10-31 20:57:22 +01:00

driver_load

Order yaml field

2022-10-25 12:00:56 +02:00

file

new rule for lnk files with lower score

2022-11-07 14:14:04 +01:00

image_load

Merge pull request #3664 from frack113/DeleteShadowCopies

2022-11-01 12:32:04 +01:00

network_connection

Merge pull request #3670 from nasbench/fix-false-positives

2022-11-04 17:56:32 +01:00

pipe_created

Optimize selection

2022-10-31 20:57:48 +01:00

powershell

Fix

2022-11-03 09:39:48 +01:00

process_access

Update proc_access_win_in_memory_assembly_execution.yml

2022-11-03 11:19:09 +01:00

process_creation

Update rules/windows/process_creation/proc_creation_win_iis_service_account_password_dumped.yml

2022-11-19 15:06:36 +11:00

raw_access_thread

Order yaml field

2022-10-25 12:00:56 +02:00

registry

fix: new FPs found in testing environment

2022-11-01 16:19:14 +01:00

sysmon

Order yaml field

2022-10-25 12:00:56 +02:00

wmi_event

Order yaml field

2022-10-25 12:00:56 +02:00