Michael Hunhoff 750e164a41 removing ntdll requirement from function features exported by both ntdll and ntoskrnl

2021-02-16 18:28:05 -07:00

..

enumerate-processes-on-remote-desktop-session-host.yml

rules: remove empty ATT&CK/MBC tags, format ATT&CK tags better

2020-06-21 17:54:01 -06:00

enumerate-processes-via-ntquerysysteminformation.yml

removing ntdll requirement from function features exported by both ntdll and ntoskrnl

2021-02-16 18:28:05 -07:00

enumerate-processes.yml

merge

2021-01-02 11:06:53 -07:00

find-process-by-pid.yml

rules: remove empty ATT&CK/MBC tags, format ATT&CK tags better

2020-06-21 17:54:01 -06:00

get-explorer-pid.yml

fresh rules from al-khaser project

2020-08-13 09:39:42 -06:00