Repository navigation

All pull requests

Labels (7)Milestones (0)New pull request

Open

(29)

Closed

(69)

Add Schedule\TaskCache registry monitoring for scheduled task (T1053.005)
#198indrajeevt opened Sep 25, 2026
Loldrivers extension
#193khulnasoft-bot opened Jul 3, 2024
Accept EULA cannot combine with loading a config
#180HenkPoley opened May 12, 2023
1
Line 239 registry formatting
#179kevinelwell opened Mar 29, 2023
Add pwsh.exe to list of suspicious Windows tools
#176miscalibrated opened Jan 28, 2023
Added Installscript
#174bytew0lf opened Dec 23, 2022
Many errors when install
#170MrAndrii opened Oct 18, 2022
1
Add some "TargetFilename" in "SYSMON EVENT ID 15" section
#164matcha-shake opened Feb 21, 2022
Update the Antivirus Tampering configuration, using general condition
#160hieuttmmo opened Oct 18, 2021
1
test
#159w09rkerbee opened Sep 13, 2021
1
Add Splunk exclusions per sysmon-modular
#156Gusty-Dusty opened Jul 30, 2021
1
Registry key to detect definitions of Windows Defender Exclusions
#155phantinuss opened Jul 12, 2021
Outlook Webview URL changes
#154humpalum opened Jun 14, 2021
Added named pipe used by Cobalt Strike
#150WojciechLesicki opened May 26, 2021
Fix FileDelete example.
#149sigalpes opened May 26, 2021
Add exclusion for WUDFHost.exe to Event 11
#148lord-garmadon opened Apr 19, 2021
Corrected event name for Event ID 23
#147lord-garmadon opened Apr 16, 2021
Monitor for .js files for Microsoft JScript
#146KevinDeNotariis opened Apr 7, 2021
Added WinRM ports and Service names
#145tobor88 opened Mar 16, 2021
1
Add ASP files for webshells
#144GossiTheDog opened Mar 8, 2021
Update NetworkConnect rule to fix Metasploit default port
#143brokenvhs opened Mar 6, 2021
Ransomware artifacts added to File Creation config
#140sduff opened Feb 18, 2021
2
MiniNT registry key check
#130ThisIsNotTheUserYouAreLookingFor opened Sep 9, 2020
2
Added detection for CVE-2017-0199 and CVE-2017-8759.
#118d4rk-d4nph3 opened May 21, 2020
2
Printer port changes as used in CVE-2020-1048
#115Neo23x0 opened May 15, 2020Contributor

Pull requests