capa-rules/host-interaction/process/list
Elad Levi 3bd8cf7646
Improve Accuracy of Various Detections (#1010)
* Update impersonate-user.yml

* Update enumerate-processes-on-remote-desktop-session-host.yml

* Update enumerate-processes-on-remote-desktop-session-host.yml

* Update enumerate-processes-on-remote-desktop-session-host.yml

* Update nursery/impersonate-user.yml

Co-authored-by: Mike Hunhoff <mike.hunhoff@gmail.com>

* Update host-interaction/process/list/enumerate-processes-on-remote-desktop-session-host.yml

Co-authored-by: Mike Hunhoff <mike.hunhoff@gmail.com>

---------

Co-authored-by: Mike Hunhoff <mike.hunhoff@gmail.com>
2025-03-10 14:19:23 -06:00
..
enumerate-processes-on-remote-desktop-session-host.yml Improve Accuracy of Various Detections (#1010) 2025-03-10 14:19:23 -06:00
enumerate-processes-via-ntquerysysteminformation.yml fix call/thread scopes manually 2023-11-24 11:35:00 +01:00
enumerate-processes.yml use "span of calls" scope (#973) 2025-01-29 10:27:13 +01:00
find-process-by-pid.yml use "span of calls" scope (#973) 2025-01-29 10:27:13 +01:00
get-explorer-pid.yml use "span of calls" scope (#973) 2025-01-29 10:27:13 +01:00