Ruben Groenewoud b330cf9438 [New Rule] Pspy Process Monitoring Detected (#2945) ...

* [New Rule] Pspy Process Monitoring Detected

* Update rules/linux/discovery_pspy_process_monitoring_detected.toml

Co-authored-by: Jonhnathan <26856693+w0rk3r@users.noreply.github.com>

* Update rules/linux/discovery_pspy_process_monitoring_detected.toml

Co-authored-by: Jonhnathan <26856693+w0rk3r@users.noreply.github.com>

* Update rules/linux/discovery_pspy_process_monitoring_detected.toml

Co-authored-by: Jonhnathan <26856693+w0rk3r@users.noreply.github.com>

---------

Co-authored-by: Jonhnathan <26856693+w0rk3r@users.noreply.github.com>

2023-07-26 15:58:33 +02:00

..

api_schemas

[FR] 8.9 Release Preparation and Update Main Branch to 8.10 (#2891)

2023-06-29 11:39:11 -04:00

beats_schemas

[FR] 8.9 Release Preparation and Update Main Branch to 8.10 (#2891)

2023-06-29 11:39:11 -04:00

ecs_schemas

[FR] 8.9 Release Preparation and Update Main Branch to 8.10 (#2891)

2023-06-29 11:39:11 -04:00

endgame_schemas

Updated ECS mappings from keyword to wildcard (#2518)

2023-02-07 09:43:19 -05:00

endpoint_schemas

[FR] Add Support for Multi-Fields and Validation in Rules (#2882)

2023-06-28 20:35:33 -04:00

__init__.py

Update package and install process (#1948)

2022-12-08 15:49:49 -05:00

attack-crosswalk.json

Move etc under detection_rules (#1885)

2022-05-02 10:11:21 -04:00

attack-technique-redirects.json

[FR] 8.9 Release Preparation and Update Main Branch to 8.10 (#2891)

2023-06-29 11:39:11 -04:00

attack-v13.1.0.json.gz

updated ATT&CK 13.0 to 13.1 (#2795)

2023-05-16 11:01:52 -04:00

commit-and-push.sh

Update commit-and-push.sh (#2640)

2023-03-09 17:31:19 -05:00

deprecated_rules.json

Lock versions for releases: 8.3,8.4,8.5,8.6,8.7,8.8,8.9 (#2921)

2023-07-11 19:57:02 -04:00

downloadable_updates.json

[FR] Generate mdx docs (#2718)

2023-05-03 16:27:30 -04:00

integration-manifests.json.gz

[Rule Tuning] Change Network Rules to Use Network Packet Capture Integration (#2665)

2023-06-26 17:35:49 -04:00

integration-schemas.json.gz

[Rule Tuning] Change Network Rules to Use Network Packet Capture Integration (#2665)

2023-06-26 17:35:49 -04:00

lock-multiple.sh

Move etc under detection_rules (#1885)

2022-05-02 10:11:21 -04:00

non-ecs-schema.json

[New Rule] Pspy Process Monitoring Detected (#2945)

2023-07-26 15:58:33 +02:00

packages.yml

[FR] 8.9 Release Preparation and Update Main Branch to 8.10 (#2891)

2023-06-29 11:39:11 -04:00

rule_template_typosquatting_domain.json

Move etc under detection_rules (#1885)

2022-05-02 10:11:21 -04:00

rule-mapping.yml

Move etc under detection_rules (#1885)

2022-05-02 10:11:21 -04:00

security-logo-color-64px.svg

Move etc under detection_rules (#1885)

2022-05-02 10:11:21 -04:00

stack-schema-map.yaml

[FR] 8.9 Release Preparation and Update Main Branch to 8.10 (#2891)

2023-06-29 11:39:11 -04:00

test_toml.json

Move etc under detection_rules (#1885)

2022-05-02 10:11:21 -04:00

version.lock.json

Lock versions for releases: 8.3,8.4,8.5,8.6,8.7,8.8,8.9 (#2921)

2023-07-11 19:57:02 -04:00