frack113
|
4f83231697
|
Update old sigma link (#303)
* Update SigmaHQ ref
Signed-off-by: frack113 <62423083+frack113@users.noreply.github.com>
* Update SigmaHQ ref
Signed-off-by: frack113 <62423083+frack113@users.noreply.github.com>
* Update SigmaHq ref
Signed-off-by: frack113 <62423083+frack113@users.noreply.github.com>
* Update SigmaHq ref
Signed-off-by: frack113 <62423083+frack113@users.noreply.github.com>
---------
Signed-off-by: frack113 <62423083+frack113@users.noreply.github.com>
|
2023-10-18 11:30:34 -04:00 |
|
frack113
|
e8ea28d4e9
|
Update SigmaHQ ref (#301)
Signed-off-by: frack113 <62423083+frack113@users.noreply.github.com>
|
2023-06-19 22:40:24 +01:00 |
|
Wietze
|
67e1040172
|
Merge remote-tracking branch 'upstream/master' into windows_11_sprint
|
2022-10-03 16:18:57 +01:00 |
|
xenoscr
|
f5baac1c45
|
Adding missing authors
|
2022-09-10 23:37:10 -04:00 |
|
xenoscr
|
ce36f924fc
|
Removing extra --- from each yaml file
|
2022-09-10 22:16:47 -04:00 |
|
Wietze
|
2b20998371
|
Remove redundant powershell command from comsvcs entry
|
2022-05-05 11:18:39 +01:00 |
|
Wietze
|
b92ee99627
|
Addressing @bohops's feedback
|
2022-05-05 11:12:22 +01:00 |
|
Wietze
|
085aaa37b1
|
Adding more missed-out entries
|
2021-12-15 11:50:18 +00:00 |
|
bohops
|
23dd0236ae
|
Detection Resources and Other Updates (#179)
* Add detection links for scripts
* Add detection links for OtherMSBins. Fixed and updated as needed.
* Add detection links for MSBins. Fixed and updated as needed.
* Add detection links for oslibraries
* Updating template for Detections
* Removing empty Detection:Sigma entries
* Remove redundant blank line
* Replacing commit URL with file URL
Co-authored-by: root <root@DESKTOP-5CR935D.localdomain>
Co-authored-by: Wietze <wietze@users.noreply.github.com>
|
2021-11-15 08:19:03 -05:00 |
|
Wietze
|
2380c506d4
|
LSASS realign to T1003.001
|
2021-11-05 20:35:58 +00:00 |
|
Wietze
|
4f7ec8d2af
|
MITRE ATT&CK realignment sprint
|
2021-11-05 18:58:26 +00:00 |
|
Wietze
|
14dca38278
|
Standardise date formats (see https://yaml.org/type/timestamp.html)
|
2021-01-10 15:04:52 +00:00 |
|
Oddvar Moe
|
ed266c0983
|
Fixed some typos
|
2019-09-17 20:45:49 +02:00 |
|
Oddvar Moe
|
8762fc5735
|
Acknowledgement fix for comsvcs
|
2019-09-16 09:50:01 +02:00 |
|
Oddvar Moe
|
4ebf1ac4f7
|
Adjusted case sensitive type in yml file for Comsvcs
|
2019-09-16 09:44:14 +02:00 |
|
Oddvar Moe
|
11c6c7c48d
|
Adjusted
|
2019-09-16 09:38:05 +02:00 |
|
plowsec
|
dd5df7cf3e
|
Add Comsvcs.yml: dump lsass via signed DLL.
|
2019-08-30 14:12:46 +02:00 |
|