Sigma Rule Update (2023-02-24 21:09:55) (#321)

Co-authored-by: hach1yon <[email protected]>
Yamato-Security · Feb 24, 2023 · 2dd5318 · 2dd5318
1 parent e41fe01
commit 2dd5318
Show file tree

Hide file tree

Showing 38 changed files with 264 additions and 994 deletions.
diff --git a/sigma/builtin/powershell/powershell_script/posh_ps_cl_invocation_lolscript_count.yml b/sigma/builtin/powershell/powershell_script/posh_ps_cl_invocation_lolscript_count.yml
diff --git a/sigma/builtin/powershell/powershell_script/posh_ps_cl_mutexverifiers_lolscript_count.yml b/sigma/builtin/powershell/powershell_script/posh_ps_cl_mutexverifiers_lolscript_count.yml
diff --git a/...ltin/process_creation/proc_creation_win_correlation_dnscat2_powershell_implementation.yml b/...ltin/process_creation/proc_creation_win_correlation_dnscat2_powershell_implementation.yml
diff --git a/sigma/builtin/process_creation/proc_creation_win_correlation_multiple_susp_cli.yml b/sigma/builtin/process_creation/proc_creation_win_correlation_multiple_susp_cli.yml
diff --git a/sigma/builtin/process_creation/proc_creation_win_correlation_susp_builtin_commands_recon.yml b/sigma/builtin/process_creation/proc_creation_win_correlation_susp_builtin_commands_recon.yml
diff --git a/sigma/builtin/security/win_security_global_catalog_enumeration.yml b/sigma/builtin/security/win_security_global_catalog_enumeration.yml
diff --git a/sigma/builtin/security/win_security_rare_schtasks_creations.yml b/sigma/builtin/security/win_security_rare_schtasks_creations.yml
diff --git a/sigma/builtin/security/win_security_susp_failed_logons_explicit_credentials.yml b/sigma/builtin/security/win_security_susp_failed_logons_explicit_credentials.yml
diff --git a/sigma/builtin/security/win_security_susp_failed_logons_single_source.yml b/sigma/builtin/security/win_security_susp_failed_logons_single_source.yml