sara-rn 4f27bfe758 Ghostly Hollowing process injection rule (#865) ...

* ghostly hollowing process injection rule

---------

Co-authored-by: Moritz <mr-tz@users.noreply.github.com>

2024-01-23 10:55:34 +01:00

..

bootloader

fix call/thread scopes manually

2023-11-24 11:35:00 +01:00

cli

fix call/thread scopes manually

2023-11-24 11:35:00 +01:00

clipboard

fix scopes for rules with subscopes 2

2023-11-24 11:35:03 +01:00

console

upgrade rules using updated script

2023-11-24 11:34:28 +01:00

driver

fix call/thread scopes manually

2023-11-24 11:35:00 +01:00

environment-variable

fix call/thread scopes manually

2023-11-24 11:35:00 +01:00

file-system

Pull out .NET features (#866)

2024-01-03 09:32:11 -07:00

filter

fix call/thread scopes manually

2023-11-24 11:35:00 +01:00

firewall/modify

upgrade rules using updated script

2023-11-24 11:34:28 +01:00

gui

fix scopes for rules with subscopes 2

2023-11-24 11:35:03 +01:00

hardware

Use COM instead of bytes features (#864)

2023-12-18 07:54:14 +01:00

log

upgrade rules using updated script

2023-11-24 11:34:28 +01:00

memory

upgrade rules using updated script

2023-11-24 11:34:28 +01:00

mutex

fix call/thread scopes manually

2023-11-24 11:35:00 +01:00

network

upgrade rules using updated script

2023-11-24 11:34:28 +01:00

os

fix call/thread scopes manually

2023-11-24 11:35:00 +01:00

process

Ghostly Hollowing process injection rule (#865)

2024-01-23 10:55:34 +01:00

recycle-bin

upgrade rules using updated script

2023-11-24 11:34:28 +01:00

registry

fix call/thread scopes manually

2023-11-24 11:35:00 +01:00

service

fix some dynamic unsupported rules

2023-11-24 11:35:05 +01:00

session

fix scopes for rules with subscopes 2

2023-11-24 11:35:03 +01:00

software

upgrade rules using updated script

2023-11-24 11:34:28 +01:00

thread

Update TLS namespaces (#863)

2023-12-18 07:53:42 +01:00

uac/bypass

upgrade rules using updated script

2023-11-24 11:34:28 +01:00

wmi

Use COM instead of bytes features (#864)

2023-12-18 07:54:14 +01:00