itiB 034f9c0957 Add: sigma rules (#175)

2021-11-22 08:45:44 +09:00

..

powershell_alternate_powershell_hosts.yml

Add: sigma rules (#175)

2021-11-22 08:45:44 +09:00

powershell_bad_opsec_artifacts.yml

Add: sigma rules (#175)

2021-11-22 08:45:44 +09:00

powershell_clear_powershell_history.yml

Add: sigma rules (#175)

2021-11-22 08:45:44 +09:00

powershell_decompress_commands.yml

Add: sigma rules (#175)

2021-11-22 08:45:44 +09:00

powershell_get_clipboard.yml

Add: sigma rules (#175)

2021-11-22 08:45:44 +09:00

powershell_invoke_obfuscation_clip.yml

Add: sigma rules (#175)

2021-11-22 08:45:44 +09:00

powershell_invoke_obfuscation_obfuscated_iex.yml

Add: sigma rules (#175)

2021-11-22 08:45:44 +09:00

powershell_invoke_obfuscation_stdin.yml

Add: sigma rules (#175)

2021-11-22 08:45:44 +09:00

powershell_invoke_obfuscation_var.yml

Add: sigma rules (#175)

2021-11-22 08:45:44 +09:00

powershell_invoke_obfuscation_via_compress.yml

Add: sigma rules (#175)

2021-11-22 08:45:44 +09:00

powershell_invoke_obfuscation_via_rundll.yml

Add: sigma rules (#175)

2021-11-22 08:45:44 +09:00

powershell_invoke_obfuscation_via_stdin.yml

Add: sigma rules (#175)

2021-11-22 08:45:44 +09:00

powershell_invoke_obfuscation_via_use_clip.yml

Add: sigma rules (#175)

2021-11-22 08:45:44 +09:00

powershell_invoke_obfuscation_via_use_mhsta.yml

Add: sigma rules (#175)

2021-11-22 08:45:44 +09:00

powershell_invoke_obfuscation_via_use_rundll32.yml

Add: sigma rules (#175)

2021-11-22 08:45:44 +09:00

powershell_invoke_obfuscation_via_var.yml

Add: sigma rules (#175)

2021-11-22 08:45:44 +09:00

powershell_powercat.yml

Add: sigma rules (#175)

2021-11-22 08:45:44 +09:00

powershell_remote_powershell_session.yml

Add: sigma rules (#175)

2021-11-22 08:45:44 +09:00

powershell_susp_athremotefxvgpudisablementcommand.yml

Add: sigma rules (#175)

2021-11-22 08:45:44 +09:00

powershell_susp_zip_compress.yml

Add: sigma rules (#175)

2021-11-22 08:45:44 +09:00