admin/olafhartong-sysmon-modular
1
0
Fork 0
mirror of https://github.com/olafhartong/sysmon-modular synced 2026-06-08 16:29:39 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
version1302
olafhartong-sysmon-modular/1_process_creation
T
History
Olaf Hartong c480ad7994 Ransomware Inhibit System Recovery
2021-04-15 11:49:55 +02:00
..
exclude_adobe_acrobat.xml
schema update to 4.30
2020-06-01 22:31:40 +02:00
exclude_adobe_creative_cloud.xml
schema update to 4.30
2020-06-01 22:31:40 +02:00
exclude_adobe_flash.xml
schema update to 4.30
2020-06-01 22:31:40 +02:00
exclude_adobe_supporting_processes.xml
schema update to 4.30
2020-06-01 22:31:40 +02:00
exclude_azure_sentinel_agent.xml
refined filter
2020-12-28 20:43:29 +01:00
exclude_cisco_anyconnect.xml
schema update to 4.30
2020-06-01 22:31:40 +02:00
exclude_dotnet-3-or-4.xml
schema update to 4.30
2020-06-01 22:31:40 +02:00
exclude_drivers.xml
schema update to 4.30
2020-06-01 22:31:40 +02:00
exclude_dropbox.xml
schema update to 4.30
2020-06-01 22:31:40 +02:00
exclude_eset.xml
schema update to 4.30
2020-06-01 22:31:40 +02:00
exclude_google_chrome.xml
schema update to 4.30
2020-06-01 22:31:40 +02:00
exclude_ivanti_res.xml
schema update to 4.30
2020-06-01 22:31:40 +02:00
exclude_malwarebytes.xml
schema update to 4.30
2020-06-01 22:31:40 +02:00
exclude_microsoft_office_click2run.xml
schema update to 4.30
2020-06-01 22:31:40 +02:00
exclude_microsoft_office_services.xml
schema update to 4.30
2020-06-01 22:31:40 +02:00
exclude_mozilla_firefox.xml
schema update to 4.30
2020-06-01 22:31:40 +02:00
exclude_sophos.xml
schema update to 4.30
2020-06-01 22:31:40 +02:00
exclude_splunk_universal_forwarder.xml
schema update to 4.30
2020-06-01 22:31:40 +02:00
exclude_splunk.xml
schema update to 4.30
2020-06-01 22:31:40 +02:00
exclude_svchost.xml
schema update to 4.30
2020-06-01 22:31:40 +02:00
exclude_trend_micro.xml
schema update to 4.30
2020-06-01 22:31:40 +02:00
exclude_windows_defender.xml
schema update to 4.30
2020-06-01 22:31:40 +02:00
exclude_windows_generic_processes.xml
schema update to 4.30
2020-06-01 22:31:40 +02:00
include_accessibility_features.xml
ATT&CK Sub-Techniques retagging
2020-07-12 22:29:28 +02:00
include_appc_shim.xml
ATT&CK Sub-Techniques retagging
2020-07-12 22:29:28 +02:00
include_bitsadmin.xml
schema update to 4.30
2020-06-01 22:31:40 +02:00
include_bypass_uac.xml
ATT&CK Sub-Techniques retagging
2020-07-12 22:29:28 +02:00
include_dosfuscation.xml
changed character to ascii
2021-04-10 21:07:10 +02:00
include_explorer.xml
schema update to 4.30
2020-06-01 22:31:40 +02:00
include_fltmc.xml
ATT&CK Sub-Techniques retagging
2020-07-12 22:29:28 +02:00
include_installutil.xml
ATT&CK Sub-Techniques retagging
2020-07-12 22:29:28 +02:00
include_living_of_the_land.xml
technique_id fixes
2020-11-08 09:35:55 -06:00
include_mavinject.xml
schema update to 4.30
2020-06-01 22:31:40 +02:00
include_microsoft_cmstp.xml
rulename fix
2020-07-13 16:58:20 +02:00
include_msbuild.xml
ATT&CK Sub-Techniques retagging
2020-07-12 22:29:28 +02:00
include_msoffice.xml
schema update to 4.30
2020-06-01 22:31:40 +02:00
include_regsvcs_regasm.xml
ATT&CK Sub-Techniques retagging
2020-07-12 22:29:28 +02:00
include_syncappvpublishingserver.xml
schema update to 4.30
2020-06-01 22:31:40 +02:00
include_sysinternals.xml
ATT&CK Sub-Techniques retagging
2020-07-12 22:29:28 +02:00
include_system_recovery.xml
Ransomware Inhibit System Recovery
2021-04-15 11:49:55 +02:00
include_uncommon_locations.xml
schema update to 4.30
2020-06-01 22:31:40 +02:00
include_windows_control_panel.xml
ATT&CK Sub-Techniques retagging
2020-07-12 22:29:28 +02:00
include_windows_defender_tampering.xml
schema update to 4.30
2020-06-01 22:31:40 +02:00
include_windows_remote_management.xml
added windows remote shell host
2021-04-15 11:42:39 +02:00