Joshua Wright 6766ac618c Add Event ID 4673 Sensitive Privilege Use detection for Mimikatz

2019-04-30 14:38:43 -04:00

..

disablestop-eventlog.evtx

Add detector and event log to watch for Event Log Service stop/start as an indicator or event log tampering with eventlogedit

2019-04-28 14:23:23 -04:00

many-events-application.evtx

Add files via upload

2016-09-20 15:35:54 -04:00

many-events-security.evtx

Add files via upload

2016-09-20 15:35:54 -04:00

many-events-system.evtx

Add files via upload

2016-09-20 15:35:54 -04:00

metasploit-psexec-native-target-security.evtx

Add files via upload

2016-09-21 00:03:48 -04:00

metasploit-psexec-native-target-system.evtx

Add files via upload

2016-09-20 23:58:54 -04:00

metasploit-psexec-powershell-target-security.evtx

Add files via upload

2016-09-20 15:35:54 -04:00

metasploit-psexec-powershell-target-system.evtx

Add files via upload

2016-09-20 15:35:54 -04:00

mimikatz-privesc-hashdump.evtx

Add Event ID 4673 Sensitive Privilege Use detection for Mimikatz

2019-04-30 14:38:43 -04:00

new-user-security.evtx

Add files via upload

2016-09-20 15:35:54 -04:00

Powershell-Invoke-Obfuscation-encoding-menu.evtx

Added Invoke-Obfuscation sample evtx files

2017-08-30 15:49:46 -04:00

Powershell-Invoke-Obfuscation-many.evtx

Added Invoke-Obfuscation sample evtx files

2017-08-30 15:49:46 -04:00

Powershell-Invoke-Obfuscation-string-menu.evtx

Added Invoke-Obfuscation sample evtx files

2017-08-30 15:49:46 -04:00

powersploit-security.evtx

Add files via upload

2016-09-20 15:35:54 -04:00

powersploit-system.evtx

Add files via upload

2016-09-20 15:35:54 -04:00

psattack-security.evtx

Add files via upload

2016-09-20 15:35:54 -04:00

smb-password-guessing-security.evtx

Add files via upload

2016-09-20 15:35:54 -04:00