2 Commits

Author	SHA1	Message	Date
Justin Ibarra	59da2da474	[Rule Tuning] Ensure host information is in endpoint rule queries (#2593) ... * add unit tests to ensure host type and platform are included * add host.os.name 'linux' to all linux rules * add host.os.name macos to mac rules * add host.os.name to windows rules; fix linux dates * update from host.os.name to host.os.type Co-authored-by: brokensound77 <brokensound77@users.noreply.github.com> Co-authored-by: Jonhnathan <26856693+w0rk3r@users.noreply.github.com>	2023-03-05 11:41:19 -07:00
Samirbous	c6125004c1	[New Rules] WSL Related Rules (#2463) ... * Create defense_evasion_wsl_registry_modification.toml * Create defense_evasion_wsl_kalilinux.toml * Create defense_evasion_wsl_child_process.toml * Update defense_evasion_wsl_kalilinux.toml * Create defense_evasion_wsl_filesystem.toml * Update defense_evasion_wsl_child_process.toml * Update defense_evasion_wsl_filesystem.toml * Update defense_evasion_wsl_kalilinux.toml * Update defense_evasion_wsl_child_process.toml * Update defense_evasion_wsl_filesystem.toml * Update defense_evasion_wsl_kalilinux.toml * Update defense_evasion_wsl_registry_modification.toml * Update defense_evasion_wsl_child_process.toml * Create defense_evasion_wsl_bash_exec.toml * Update defense_evasion_wsl_bash_exec.toml * Update defense_evasion_wsl_bash_exec.toml * Update defense_evasion_wsl_bash_exec.toml * Update defense_evasion_wsl_kalilinux.toml * Create defense_evasion_wsl_enabled_via_dism.toml * Update defense_evasion_wsl_enabled_via_dism.toml * Update defense_evasion_wsl_bash_exec.toml * Update defense_evasion_wsl_bash_exec.toml * Update defense_evasion_wsl_bash_exec.toml * Delete defense_evasion_wsl_bash_exec.toml * Update defense_evasion_wsl_enabled_via_dism.toml * Create defense_evasion_wsl_bash_exec.toml * Delete defense_evasion_wsl_bash_exec.toml * Create defense_evasion_wsl_bash_exec.toml * Update defense_evasion_wsl_bash_exec.toml * Update defense_evasion_wsl_bash_exec.toml * Update defense_evasion_wsl_bash_exec.toml * Update defense_evasion_wsl_bash_exec.toml * Update defense_evasion_wsl_registry_modification.toml * Update defense_evasion_wsl_kalilinux.toml * Update defense_evasion_wsl_kalilinux.toml	2023-02-01 15:10:28 +00:00