mike-hunhoff 281eec1c60 Merge pull request #403 from fireeye/new/20210602 ...

adding create-process-memory-minidump.yml

2021-06-10 08:42:19 -06:00

..

bootloader

address optional blocks

2021-05-05 17:25:07 +02:00

cli

reformated using capafmt

2021-01-27 15:30:59 +01:00

clipboard

added mbc mappings in the host-interaction namespace

2020-12-16 15:30:06 -05:00

console

minor updates

2021-06-08 14:36:22 +02:00

driver

address optional blocks

2021-05-05 17:25:07 +02:00

environment-variable

graduate "get COMSPEC environment variable"

2021-06-08 10:12:15 -06:00

file-system

fix "move file" example

2021-06-08 11:25:08 -06:00

filter

PR change requests

2021-01-07 13:06:35 -07:00

firewall/modify

update attack mappings

2021-01-02 11:46:20 -07:00

gui

graduate "set console window title"

2021-06-04 12:30:09 -06:00

hardware

update ATT&CK and MBC mappings

2021-04-13 09:37:10 -06:00

log

added mbc mappings in the host-interaction namespace

2020-12-16 15:30:06 -05:00

mutex

added mbc mappings in the host-interaction namespace

2020-12-16 15:30:06 -05:00

network

Update rule metadata for rules written by @recvfrom

2021-06-06 23:30:34 -04:00

os

remove single child statements

2021-05-19 18:12:09 +02:00

process

Merge pull request #403 from fireeye/new/20210602

2021-06-10 08:42:19 -06:00

registry

update ATT&CK and MBC mappings

2021-04-13 09:37:10 -06:00

service

merge duplicate rules

2021-03-22 18:42:54 +01:00

session

consolidate host-interaction/sid to host-interaction-session

2021-06-08 11:17:38 -06:00

thread

graduate "enumerate threads"

2021-06-08 10:04:14 -06:00

uac/bypass

graduate "bypass UAC via ICMLuaUtil"

2021-06-08 10:01:23 -06:00

wmi

graduate "connect to WMI namespace via WbemLocator"

2021-06-04 12:14:16 -06:00