P4T12ICK 0ca3face42 updates srs detections

2023-03-27 11:12:42 +02:00

..

Crowdstrike_Process.yml

Converted endpoint detections from v3 to v4

2022-12-19 09:34:19 +01:00

OSQuery_ES_Process_Events.yml

Converted endpoint detections from v3 to v4

2022-12-19 09:34:19 +01:00

Powershell_4104.yml

Converted endpoint detections from v3 to v4

2022-12-19 09:34:19 +01:00

Sysmon_Event_ID_1.yml

improved sigma converter

2023-03-07 11:27:12 +01:00

Sysmon_Event_ID_3.yml

Converted endpoint detections from v3 to v4

2022-12-19 09:34:19 +01:00

Sysmon_Event_ID_5.yml

Converted endpoint detections from v3 to v4

2022-12-19 09:34:19 +01:00

Sysmon_Event_ID_6.yml

Converted endpoint detections from v3 to v4

2022-12-19 09:34:19 +01:00

Sysmon_Event_ID_7.yml

Converted endpoint detections from v3 to v4

2022-12-19 09:34:19 +01:00

Sysmon_Event_ID_8.yml

Converted endpoint detections from v3 to v4

2022-12-19 09:34:19 +01:00

Sysmon_Event_ID_9.yml

Converted endpoint detections from v3 to v4

2022-12-19 09:34:19 +01:00

Sysmon_Event_ID_10.yml

Converted endpoint detections from v3 to v4

2022-12-19 09:34:19 +01:00

Sysmon_Event_ID_11.yml

Converted endpoint detections from v3 to v4

2022-12-19 09:34:19 +01:00

Sysmon_Event_ID_13.yml

Converted endpoint detections from v3 to v4

2022-12-19 09:34:19 +01:00

Sysmon_Event_ID_15.yml

Converted endpoint detections from v3 to v4

2022-12-19 09:34:19 +01:00

Sysmon_Event_ID_20.yml

Converted endpoint detections from v3 to v4

2022-12-19 09:34:19 +01:00

Sysmon_Event_ID_21.yml

Converted endpoint detections from v3 to v4

2022-12-19 09:34:19 +01:00

Sysmon_Event_ID_22.yml

Converted endpoint detections from v3 to v4

2022-12-19 09:34:19 +01:00

Sysmon_Event_ID_23.yml

Converted endpoint detections from v3 to v4

2022-12-19 09:34:19 +01:00

Windows_Security_4624.yml

Converted endpoint detections from v3 to v4

2022-12-19 09:34:19 +01:00

Windows_Security_4625.yml

Converted endpoint detections from v3 to v4

2022-12-19 09:34:19 +01:00

Windows_Security_4648.yml

Converted endpoint detections from v3 to v4

2022-12-19 09:34:19 +01:00

Windows_Security_4663.yml

Converted endpoint detections from v3 to v4

2022-12-19 09:34:19 +01:00

Windows_Security_4688.yml

wip

2023-03-07 09:19:42 +01:00

Windows_Security_4698.yml

Converted endpoint detections from v3 to v4

2022-12-19 09:34:19 +01:00

Windows_Security_4703.yml

Converted endpoint detections from v3 to v4

2022-12-19 09:34:19 +01:00

Windows_Security_4720.yml

Converted endpoint detections from v3 to v4

2022-12-19 09:34:19 +01:00

Windows_Security_4732.yml

Converted endpoint detections from v3 to v4

2022-12-19 09:34:19 +01:00

Windows_Security_4738.yml

Converted endpoint detections from v3 to v4

2022-12-19 09:34:19 +01:00

Windows_Security_4741.yml

Converted endpoint detections from v3 to v4

2022-12-19 09:34:19 +01:00

Windows_Security_4742.yml

updates srs detections

2023-03-27 11:12:42 +02:00

Windows_Security_4768.yml

Converted endpoint detections from v3 to v4

2022-12-19 09:34:19 +01:00

Windows_Security_4769.yml

Converted endpoint detections from v3 to v4

2022-12-19 09:34:19 +01:00

Windows_Security_4771.yml

Converted endpoint detections from v3 to v4

2022-12-19 09:34:19 +01:00

Windows_Security_4776.yml

Converted endpoint detections from v3 to v4

2022-12-19 09:34:19 +01:00

Windows_Security_4781.yml

Converted endpoint detections from v3 to v4

2022-12-19 09:34:19 +01:00

Windows_Security_4798.yml

Converted endpoint detections from v3 to v4

2022-12-19 09:34:19 +01:00

Windows_Security_5136.yml

updates srs detections

2023-03-27 11:12:42 +02:00

Windows_Security_5145.yml

Converted endpoint detections from v3 to v4

2022-12-19 09:34:19 +01:00

Windows_System_7045.yml

Converted endpoint detections from v3 to v4

2022-12-19 09:34:19 +01:00