frack113 7060db3d47 Promotion rules (#3821) ...

* Promotion rules

* fix missing null

* fix: modified date

Co-authored-by: Nasreddine Bencherchali <8741929+nasbench@users.noreply.github.com>

2022-12-27 12:29:10 +01:00

..

dns_query_win_anonymfiles_com.yml

Order yaml field

2022-10-25 12:00:56 +02:00

dns_query_win_hybridconnectionmgr_servicebus.yml

old experimental rule promotion

2022-10-09 16:54:04 +02:00

dns_query_win_lobas_appinstaller.yml

Promotion rules (#3821)

2022-12-27 12:29:10 +01:00

dns_query_win_mal_cobaltstrike.yml

Promotion rules (#3821)

2022-12-27 12:29:10 +01:00

dns_query_win_mega_nz.yml

old experimental rule promotion

2022-10-09 16:54:04 +02:00

dns_query_win_possible_dns_rebinding.yml

Order yaml field

2022-10-25 12:00:56 +02:00

dns_query_win_regsvr32_network_activity.yml

Update title (#3734)

2022-11-29 07:36:45 +01:00

dns_query_win_remote_access_software_domains.yml

feat: new rules related to rat software based on #2841

2022-12-23 20:42:51 +01:00

dns_query_win_susp_ipify.yml

Rule Dev

2022-11-18 11:15:28 +01:00

dns_query_win_susp_ldap.yml

Order yaml field

2022-10-25 12:00:56 +02:00

dns_query_win_susp_teamviewer.yml

Order yaml field

2022-10-25 12:00:56 +02:00

dns_query_win_tor_onion.yml

Order yaml field

2022-10-25 12:00:56 +02:00

dns_query_win_ufile_io.yml

Order yaml field

2022-10-25 12:00:56 +02:00