Tanaka Zakku bad4429ad0 Rule tuning

2021-11-18 10:31:28 +09:00

..

already-have-hayabusa-rule

Rule tuning

2021-11-18 10:31:28 +09:00

sysmon_wmi_event_subscription.yml

…

win_metasploit_authentication.yml

…

win_multiple_suspicious_cli.yml

…

win_powershell_script_installed_as_service.yml

…

win_rare_schtasks_creations.yml

…

win_rare_service_installs.yml

…

win_susp_failed_logons_single_source2.yml

…

win_susp_failed_logons_single_source.yml

…