David Dorsey 5f30745b7c Fixed issue in CRL-1387 where the check for executionpolicy bypass ...

was too broad.
Also, added investigation searches for file and registry activity
while I was here

2019-11-06 18:39:21 -08:00

..

baselines.spec.json

Fixed issue in CRL-1387 where the check for executionpolicy bypass

2019-11-06 18:39:21 -08:00

detections.spec.json

Fixed issue in CRL-1387 where the check for executionpolicy bypass

2019-11-06 18:39:21 -08:00

investigations.spec.json

Fixed issue in CRL-1387 where the check for executionpolicy bypass

2019-11-06 18:39:21 -08:00

lookups.spec.json

Changed json to yml

2019-10-16 16:38:05 +02:00

macros.spec.json

Minor spec change to macro.spec.json

2019-09-30 16:08:08 -07:00

responses.spec.json

added entities field and updated spec files

2019-09-04 16:36:08 -07:00

story.spec.json

doc generation skeleton

2019-06-19 00:03:14 -04:00