Jason Brewer
|
b62ce205b8
|
CRL-1716 - Updating per code review requests. Adding output macro file and reference within the detection search.
|
2020-01-22 08:26:16 -08:00 |
|
Jason Brewer
|
5383117f1c
|
CRL-1716 - Fixing by clause to allow searching Processes.process for obfuscation chars.
|
2020-01-17 16:48:27 -08:00 |
|
divious1
|
f8e3113412
|
added summariesonly and fixed ctime
|
2019-12-11 15:14:49 -05:00 |
|
divious1
|
f9bdf7e0e4
|
introduced security_content_ctime as a macro, renamed all our searches to use this new macro, removing ES dependecy
|
2019-12-11 14:59:03 -05:00 |
|
Patrick Bareiss
|
af66ed5fe3
|
Changed json to yml
|
2019-10-16 16:38:05 +02:00 |
|