All pull requests

Pull requests

• Loldrivers extension

  #193·khulnasoft-bot opened Jul 3, 2024·

  ·

• Accept EULA cannot combine with loading a config

  #180·HenkPoley opened May 12, 2023·

  ·
  1

• Line 239 registry formatting

  #179·kevinelwell opened Mar 29, 2023·

  ·

• Add pwsh.exe to list of suspicious Windows tools

  #176·miscalibrated opened Jan 28, 2023·

  ·

• Added Installscript

  #174·bytew0lf opened Dec 23, 2022·

  ·

• Many errors when install

  #170·MrAndrii opened Oct 18, 2022·

  ·
  1

• Add some "TargetFilename" in "SYSMON EVENT ID 15" section

  #164·matcha-shake opened Feb 21, 2022·

  ·

• Update the Antivirus Tampering configuration, using general condition

  #160·hieuttmmo opened Oct 18, 2021·

  ·
  1

• test

  #159·w09rkerbee opened Sep 13, 2021·

  ·
  1

• Add Splunk exclusions per sysmon-modular

  #156·Gusty-Dusty opened Jul 30, 2021·

  ·
  1

• Registry key to detect definitions of Windows Defender Exclusions

  #155·phantinuss opened Jul 12, 2021·

  ·

• Outlook Webview URL changes

  #154·humpalum opened Jun 14, 2021·

  ·

• Added named pipe used by Cobalt Strike

  #150·WojciechLesicki opened May 26, 2021·

  ·

• Fix FileDelete example.

  #149·sigalpes opened May 26, 2021·

  ·

• Add exclusion for WUDFHost.exe to Event 11

  #148·lord-garmadon opened Apr 19, 2021·

  ·

• Corrected event name for Event ID 23

  #147·lord-garmadon opened Apr 16, 2021·

  ·

• Monitor for .js files for Microsoft JScript

  #146·KevinDeNotariis opened Apr 7, 2021·

  ·

• Added WinRM ports and Service names

  #145·tobor88 opened Mar 16, 2021·

  ·
  1

• Add ASP files for webshells

  #144·GossiTheDog opened Mar 8, 2021·

  ·

• Update NetworkConnect rule to fix Metasploit default port

  #143·brokenvhs opened Mar 6, 2021·

  ·

• Ransomware artifacts added to File Creation config

  #140·sduff opened Feb 18, 2021·

  ·
  2

• MiniNT registry key check

  #130·ThisIsNotTheUserYouAreLookingFor opened Sep 9, 2020·

  ·
  2

• Added detection for CVE-2017-0199 and CVE-2017-8759.

  #118·d4rk-d4nph3 opened May 21, 2020·

  ·
  2

• Printer port changes as used in CVE-2020-1048

  #115·Neo23x0 opened May 15, 2020Contributor·

  ·

• Update sysmonconfig-export.xml

  #108·harmonkc opened Mar 1, 2020·

  ·