Jonhnathan fe36864c77 [New Rule] PowerShell Suspicious Discovery Related Windows API Functions (#1548) ...

* PowerShell Suspicious Discovery Related Windows API Functions Initial Rule

* Update severity

* Lint

Co-authored-by: Justin Ibarra <brokensound77@users.noreply.github.com>

(cherry picked from commit b7dcbbae72)

2021-10-14 09:55:50 +00:00

..

api_schemas

[Bug] CLI Fixes (#1073)

2021-09-10 18:07:10 +00:00

beats_schemas

Pull latest ECS+beats schemas and update schema-map (#1417)

2021-08-12 21:10:22 +00:00

ecs_schemas

Pull latest ECS+beats schemas and update schema-map (#1417)

2021-08-12 21:10:22 +00:00

attack-crosswalk.json

[Rule Tuning] Update ATT&CK threat mappings to reflect changes (#706)

2020-12-18 12:46:16 -09:00

attack-technique-redirects.json

[Rule Tuning] Update ATT&CK threat mappings to reflect changes (#706)

2020-12-18 12:46:16 -09:00

attack-v9.0.json.gz

Refresh ATT&CK mappings to v9.0 (#1401)

2021-08-04 22:17:11 +00:00

deprecated_rules.json

Lock the versions from 7.13.0 (#1256)

2021-06-04 16:15:33 -06:00

lock-multiple.sh

[CI] Add GitHub actions workflow to lock versions across branches (#1456)

2021-08-26 20:18:34 +00:00

non-ecs-schema.json

[New Rule] PowerShell Suspicious Discovery Related Windows API Functions (#1548)

2021-10-14 09:55:50 +00:00

packages.yml

Update the package version to 0.14.0-dev.0

2021-06-17 07:25:41 -06:00

rule_template_typosquatting_domain.json

Generate detection rule to alert on traffic to typosquatting/homonym domains (#1199)

2021-09-03 20:36:52 +00:00

rule-mapping.yml

[New Rule] AWS EC2 Snapshot Activity

2020-07-07 15:10:06 -06:00

security-logo-color-64px.svg

[Fleet] Update template and packaging code for fleet packages (#1280)

2021-06-15 07:54:50 -06:00

stack-schema-map.yaml

Update main to point to 7.16 (#1457)

2021-08-26 20:24:53 +00:00

test_toml.json

Add rule loader and dependencies

2020-06-29 23:17:42 -06:00

version.lock.json

Lock versions for releases: 7.13,7.14,7.15 (#1545)

2021-10-13 22:24:28 +00:00