2 Commits

Author	SHA1	Message	Date
Jonhnathan	4233fef238	[Security Content] Include "Data Source: Elastic Defend" tag (#3002) ... * win folder * Other folders * Update test_all_rules.py * . * updated missing elastic defend tags --------- Co-authored-by: terrancedejesus <terrance.dejesus@elastic.co>	2023-09-05 14:22:01 -04:00
Ruben Groenewoud	7a1f376a34	[New Rules] Conversion of deprecated ERs over to DRs (#2877) ... * [Conversion] Data Encrypted via OpenSSL * [Conversion] sus funzip extraction/decompression * [Conversion] LD_PRELOAD env var process injection * fix unit testing failure * suspecting endgame incompatibility * fixed typo * added LD_LIBRARY_PATH * Update defense_evasion_ld_preload_env_variable_process_injection.toml * Update defense_evasion_ld_preload_env_variable_process_injection.toml * Added exclusions for FPs * Update rules/linux/defense_evasion_ld_preload_env_variable_process_injection.toml Co-authored-by: Samirbous <64742097+Samirbous@users.noreply.github.com> * Update rules/linux/impact_data_encrypted_via_openssl.toml Co-authored-by: Samirbous <64742097+Samirbous@users.noreply.github.com> --------- Co-authored-by: Samirbous <64742097+Samirbous@users.noreply.github.com>	2023-07-02 10:39:44 +02:00