add test rule files

2021-12-09 01:29:23 +09:00
parent 360d80b578
commit db3616b56d
16 changed files with 281 additions and 9 deletions
--- a/rules/sigma/builtin/win_hidden_user_creation.yml
+++ b/rules/sigma/builtin/win_hidden_user_creation.yml
@@ -1,4 +1,3 @@
-
 title: Hidden Local User Creation
 author: Christian Burkard
 date: 2021/05/03
--- a/rules/sigma/builtin/win_user_added_to_local_administrators.yml
+++ b/rules/sigma/builtin/win_user_added_to_local_administrators.yml
@@ -1,4 +1,3 @@
-
 title: User Added to Local Administrators
 author: Florian Roth
 date: 2017/03/14
--- a/rules/sigma/builtin/win_user_creation.yml
+++ b/rules/sigma/builtin/win_user_creation.yml
@@ -1,4 +1,3 @@
-
 title: Local User Creation
 author: Patrick Bareiss
 date: 2019/04/18
--- a/rules/sigma/other/win_exchange_cve_2021_42321.yml
+++ b/rules/sigma/other/win_exchange_cve_2021_42321.yml
@@ -1,4 +1,3 @@
-
 title: Possible Exploitation of Exchange RCE CVE-2021-42321
 author: Florian Roth, @testanull
 date: 2021/11/18