2 Commits

Author	SHA1	Message	Date
Justin Ibarra	a8919b9070	[Rule Tuning] updates from documentation review for 7.16 (#1645) ... (cherry picked from commit 14c46f50b9)	2021-12-08 00:45:10 +00:00
Jonhnathan	f50fb1d61b	[New Rule] Suspicious Portable Executable Encoded in Powershell Script (#1562) ... * Create execution_posh_portable_executable.toml * Add wildcard * Remove the wildcard * Update rules/windows/execution_posh_portable_executable.toml Co-authored-by: Justin Ibarra <brokensound77@users.noreply.github.com> Co-authored-by: Justin Ibarra <brokensound77@users.noreply.github.com>	2021-10-18 17:50:16 -03:00