Moritz 149cf2d133 Merge pull request #799 from mandiant/mr-tz-patch-1 ...

Update act-as-credential-manager-dll.yml

2023-08-07 15:54:18 +02:00

..

authentication-process

Update act-as-credential-manager-dll.yml

2023-07-14 11:30:11 +02:00

exchange

Add act-as-exchange-transport-agent.yml (#782)

2023-07-05 08:39:49 +02:00

iis

*: use meta.authors everywhere

2022-05-26 11:56:31 -06:00

office

Add Office Add-ins rules. (#781)

2023-07-05 10:56:57 +02:00

registry

Update Mappings for MBC (part 10) (#674)

2023-02-01 10:09:34 +01:00

scheduled-tasks

Add T1053.002 to schedule task via command line rule (#685)

2023-02-10 11:08:01 +01:00

service

Add checks for creating a service by writing to the registry (#687)

2023-02-06 15:14:20 +01:00

startup-folder

*: use meta.authors everywhere

2022-05-26 11:56:31 -06:00

act-as-dhcp-server-callout-dll.yml

Add act-as-dhcp-server-callout-dll.yml act-as-dns-server-plugin-dll.yml authentication-process/act-as-security-support-provider-dll.yml authentication-process/act-as-subauthentication-package-dll.yml

2023-07-11 11:18:06 +08:00

act-as-dns-server-plugin-dll.yml

Add act-as-dhcp-server-callout-dll.yml act-as-dns-server-plugin-dll.yml authentication-process/act-as-security-support-provider-dll.yml authentication-process/act-as-subauthentication-package-dll.yml

2023-07-11 11:18:06 +08:00

create-shortcut-via-ishelllink.yml

Update metadata and promote create-shortcut-via-ishelllink.yml

2023-08-01 14:27:43 +08:00

persist-via-desktop-autostart.yml

*: use meta.authors everywhere

2022-05-26 11:56:31 -06:00

persist-via-shell-profile-or-rc-file.yml

*: use meta.authors everywhere

2022-05-26 11:56:31 -06:00