research bot d9b977a7a6 updating docs and package bits [ci skip]

2021-02-18 18:22:48 +00:00

..

.untested

detection/experimental folder for untested detections

2020-11-06 10:37:11 -08:00

child_processes_of_spoolsv_exe.yml

added datamodels as an array

2021-02-10 22:35:58 -05:00

detect_baron_samedit_cve_2021_3156_segfault.yml

added datamodels as an array

2021-02-10 22:35:58 -05:00

detect_baron_samedit_cve_2021_3156_via_osquery.yml

added datamodels as an array

2021-02-10 22:35:58 -05:00

detect_baron_samedit_cve_2021_3156.yml

added datamodels as an array

2021-02-10 22:35:58 -05:00

detect_oulook_exe_writing_a__zip_file.yml

updating docs and package bits [ci skip]

2021-02-18 18:22:48 +00:00

detection_of_tools_built_by_nirsoft.yml

added datamodels as an array

2021-02-10 22:35:58 -05:00

first_time_seen_running_windows_service.yml

added datamodels as an array

2021-02-10 22:35:58 -05:00

macos___re_opened_applications.yml

added datamodels as an array

2021-02-10 22:35:58 -05:00

processes_tapping_keyboard_events.yml

added datamodels as an array

2021-02-10 22:35:58 -05:00

remote_desktop_process_running_on_system.yml

added datamodels as an array

2021-02-10 22:35:58 -05:00

spike_in_file_writes.yml

fixing merge conflicts

2021-02-12 12:27:00 -05:00

sunburst_correlation_dll_and_network_event.yml

added datamodels as an array

2021-02-10 22:35:58 -05:00

wmi_permanent_event_subscription.yml

added datamodels as an array

2021-02-10 22:35:58 -05:00

wmi_temporary_event_subscription.yml

added datamodels as an array

2021-02-10 22:35:58 -05:00