removed noisy rules

This commit is contained in:
Tanaka Zakku
2021-11-15 08:56:09 +09:00
parent 464c7ec052
commit b2eab00604
11 changed files with 0 additions and 0 deletions

View File

@@ -1,15 +0,0 @@
title: The ... service entered the stopped|running state
description: hogehoge
author: DeepblueCLI, Zach Mathis
detection:
selection:
Channel: System
EventID: 7036
param1:
regexes: ./config/regex/regexes_suspicous_service.txt
condition: selection
falsepositives:
- unknown
output: 'Suspicious Service Name¥nService name: %ServiceName%'
creation_date: 2020/11/8
uodated_date: 2020/11/8