Florian Roth e7f5cbc22a Rule: BabyShark activity

2019-02-24 14:04:44 +01:00

..

apt_apt29_thinktanks.yml

Rule: APT29 campaign against US think tanks

2018-12-04 17:04:03 +01:00

apt_apt29_tor.yml

Add tags to APT rules

2018-07-25 09:50:01 +02:00

apt_babyshark.yml

Rule: BabyShark activity

2019-02-24 14:04:44 +01:00

apt_bear_activity_gtr19.yml

fix: bugfix in BEAR activity rule

2019-02-24 14:04:44 +01:00

apt_carbonpaper_turla.yml

Add tags to APT rules

2018-07-25 09:50:01 +02:00

apt_chafer_mar18.yml

Escaped '\*' to '\\*' where required

2019-02-03 00:24:57 +01:00

apt_cloudhopper.yml

Add tags to APT rules

2018-07-25 09:50:01 +02:00

apt_dragonfly.yml

Replace "logsource: description" with "definition" to match the specs

2018-11-15 09:00:06 +03:00

apt_elise.yml

Add tags to APT rules

2018-07-25 09:50:01 +02:00

apt_equationgroup_c2.yml

Fixed log source and field names

2018-08-04 22:58:19 +02:00

apt_equationgroup_dll_u_load.yml

Bugfix: wrong field for 4688 process creation events

2018-12-11 16:10:15 +01:00

apt_equationgroup_lnx.yml

Removed duplicate filters

2019-01-25 12:21:57 +03:00

apt_hurricane_panda.yml

Bugfix: wrong field for 4688 process creation events

2018-12-11 16:10:15 +01:00

apt_judgement_panda_gtr19.yml

fix: bugfix in Judgement Panda rule

2019-02-21 09:50:49 +01:00

apt_pandemic.yml

Add tags to APT rules

2018-07-25 09:50:01 +02:00

apt_slingshot.yml

Replace "logsource: description" with "definition" to match the specs

2018-11-15 09:00:06 +03:00

apt_sofacy_zebrocy.yml

Bugfix: wrong field for 4688 process creation events

2018-12-11 16:10:15 +01:00

apt_sofacy.yml

Escaped '\*' to '\\*' where required

2019-02-03 00:24:57 +01:00

apt_stonedrill.yml

Add tags to APT rules

2018-07-25 09:50:01 +02:00

apt_ta17_293a_ps.yml

Add tags to APT rules

2018-07-25 09:50:01 +02:00

apt_tropictrooper.yml

Bugfix: wrong field for 4688 process creation events

2018-12-11 16:10:15 +01:00

apt_turla_commands.yml

Escaped '\*' to '\\*' where required

2019-02-03 00:24:57 +01:00

apt_turla_namedpipes.yml

Replace "logsource: description" with "definition" to match the specs

2018-11-15 09:00:06 +03:00

apt_turla_service_png.yml

Turla PNG Dropper Service Name

2018-11-23 08:46:20 +01:00

apt_unidentified_nov_18.yml

Bugfix: wrong field for 4688 process creation events

2018-12-11 16:10:15 +01:00

apt_zxshell.yml

Add tags to APT rules

2018-07-25 09:50:01 +02:00

crime_fireball.yml

Add tags to APT rules

2018-07-25 09:50:01 +02:00