3 Commits

Author	SHA1	Message	Date
Mika Ayenson	fe8c81d762	[FR] Generate investigation guides (#4358)	2025-01-22 11:17:38 -06:00
Jonhnathan	f4a022c5d2	[Rule Tuning] Linux 3rd Party EDR Support - Crowdstrike and S1 - 5 (#4346) ... * [Rule Tuning] Linux 3rd Party EDR Support - Crowdstrike and S1 - X * Update rules/linux/defense_evasion_directory_creation_in_bin.toml Co-authored-by: Ruben Groenewoud <78494512+Aegrah@users.noreply.github.com> * Update rules/linux/defense_evasion_mount_execution.toml Co-authored-by: Ruben Groenewoud <78494512+Aegrah@users.noreply.github.com> --------- Co-authored-by: Ruben Groenewoud <78494512+Aegrah@users.noreply.github.com>	2025-01-09 09:44:40 -03:00
Ruben Groenewoud	56e61a6321	[New Rule] Potential Hex Payload Execution (#4241) ... * [New Rule] Potential Hex Payload Execution * Update rules/linux/defense_evasion_hex_payload_execution.toml Co-authored-by: shashank-elastic <91139415+shashank-elastic@users.noreply.github.com> --------- Co-authored-by: shashank-elastic <91139415+shashank-elastic@users.noreply.github.com>	2024-11-08 19:15:17 +01:00