Commit Graph

4 Commits

Author SHA1 Message Date
divious1 f8e3113412 added summariesonly and fixed ctime 2019-12-11 15:14:49 -05:00
divious1 f9bdf7e0e4 introduced security_content_ctime as a macro, renamed all our searches to use this new macro, removing ES dependecy 2019-12-11 14:59:03 -05:00
David Dorsey 5f30745b7c Fixed issue in CRL-1387 where the check for executionpolicy bypass
was too broad.
Also, added investigation searches for file and registry activity
while I was here
2019-11-06 18:39:21 -08:00
Patrick Bareiss af66ed5fe3 Changed json to yml 2019-10-16 16:38:05 +02:00