Swachchhanda Shrawan Poudel a15dbdaa05 Merge PR #5832 from @swachchhanda000 - fix: edr-freeze rules FPs analysed from VT ...

fix: Suspicious Loading of Dbgcore/Dbghelp DLLs from Uncommon Location - remove troublesome locations commonly used by installers
fix: HackTool - WSASS Execution - update regex to avoid mismatching on legitimate cli
update: WerFaultSecure Loading DbgCore or DbgHelp - EDR-Freeze - change it into hunting rule

2026-03-19 10:26:30 +01:00

..

image_load_side_load_cpl_from_non_system_location

Merge PR #5856 from @swachchhanda000 - Add CPL sideloading and Fsquirt entries

2026-02-28 14:21:29 +01:00

image_load_win_susp_dbgcore_dbghelp_load

Merge PR #5777 from @swachchhanda000 - feat: more edrfreeze rules

2025-12-10 15:29:38 +01:00