Michael Hunhoff 750e164a41 removing ntdll requirement from function features exported by both ntdll and ntoskrnl		2021-02-16 18:28:05 -07:00
..
enumerate-processes-on-remote-desktop-session-host.yml	rules: remove empty ATT&CK/MBC tags, format ATT&CK tags better	2020-06-21 17:54:01 -06:00
enumerate-processes-via-ntquerysysteminformation.yml	removing ntdll requirement from function features exported by both ntdll and ntoskrnl	2021-02-16 18:28:05 -07:00
enumerate-processes.yml	merge	2021-01-02 11:06:53 -07:00
find-process-by-pid.yml	rules: remove empty ATT&CK/MBC tags, format ATT&CK tags better	2020-06-21 17:54:01 -06:00
get-explorer-pid.yml	fresh rules from al-khaser project	2020-08-13 09:39:42 -06:00