Ignacio Bermudez Corrales ae3a475109 added testing data for system proc in unusual location ...

fixing detection

splitting where

fixed detection split where

2020-10-26 14:36:13 -07:00

..

attempted_credential_dump_from_registry_via_reg_exe___ssa.test.yml

multiple tests supported + output validation

2020-10-22 12:47:15 -07:00

detect_dump_lsass_memory_using_comsvcs___ssa.test.yml

multiple tests supported + output validation

2020-10-22 12:47:15 -07:00

detect_prohibited_applications_spawning_cmd_exe.test.yml

fixed tests

2020-10-22 14:30:14 -07:00

first_time_seen_cmd_line___ssa.test.yml

fixed tests

2020-10-22 14:30:14 -07:00

prohibited_apps_spawning_cmdprompt___ssa.test.yml

fixed tests

2020-10-22 14:30:14 -07:00

rare_parent_process_relationship_lolbas___ssa.test.yaml

fixed pass condition

2020-10-22 16:30:17 -07:00

system_process_running_unexpected_location___ssa.test.yml

added testing data for system proc in unusual location

2020-10-26 14:36:13 -07:00

unusual_lolbas_in_short_period_of_time___ssa.test.yml

fixed tests

2020-10-22 14:30:14 -07:00

unusually_long_command_line___ssa.test.yml

fixed tests

2020-10-22 14:30:14 -07:00