Michael Hunhoff d569817bdf adding new rules for Gh0st

2020-12-02 08:14:20 -07:00

..

enumerate-processes-on-remote-desktop-session-host.yml

rules: remove empty ATT&CK/MBC tags, format ATT&CK tags better

2020-06-21 17:54:01 -06:00

enumerate-processes-via-ntquerysysteminformation.yml

graduate rules that pass the linter

2020-07-23 17:30:37 -06:00

enumerate-processes.yml

adding new rules for Gh0st

2020-12-02 08:14:20 -07:00

find-process-by-pid.yml

rules: remove empty ATT&CK/MBC tags, format ATT&CK tags better

2020-06-21 17:54:01 -06:00

get-explorer-pid.yml

fresh rules from al-khaser project

2020-08-13 09:39:42 -06:00