P4T12ICK 22118b2ce0 new test file

2020-11-30 17:20:43 +01:00

..

.gitkeep

detection tests

2020-11-03 17:04:53 +01:00

detect_mimikatz_using_loaded_images.yml

new test file

2020-11-19 14:11:18 +01:00

detect_mimikatz_via_powershell_and_eventcode_4703.yml

new test file

2020-11-19 14:11:18 +01:00

detect_usb_device_insertion.yml

new test file

2020-11-26 13:21:46 +01:00

execution_of_file_with_spaces_before_extension.yml

new test file

2020-11-19 14:11:18 +01:00

extended_period_without_successful_netbackup_backups.yml

new test file

2020-11-19 14:11:18 +01:00

malicious_powershell_process___multiple_suspicious_command_line_arguments.yml

new test

2020-11-20 12:16:51 +01:00

malicious_powershell_process_with_obfuscation_techniques.yml

new test file

2020-11-23 11:37:22 +01:00

processes_created_by_netsh.yml

new test file

2020-11-23 13:28:48 +01:00

prohibited_software_on_endpoint.yml

change

2020-11-24 10:54:02 +01:00

reg_exe_used_to_hide_files_directories_via_registry_keys.yml

new test file

2020-11-26 13:21:46 +01:00

remote_registry_key_modifications.yml

detection test

2020-11-30 16:39:27 +01:00

remote_wmi_command_attempt.yml

detection test

2020-11-30 16:39:27 +01:00

unsigned_image_loaded_by_lsass.yml

new test file

2020-11-19 14:11:18 +01:00

windows_connhost_exe_force_flag.yml

ryuk test files

2020-11-30 17:07:17 +01:00

windows_disableantispyware_reg.yml

small changes

2020-11-30 17:09:24 +01:00