Windows - Generic Protection
crowdsecurity/windowsCore windows support : windows event log + bf detection
v0.3
Install withor pressc
$ cscli collections install crowdsecurity/windowsCore windows support : windows event log + bf detection
$ cscli collections install crowdsecurity/windowsWindows cve: try to detect local cve exploitation on windows.
$ cscli collections install crowdsecurity/windows-cveWindows firewall support : logs and port-scans detection scenarios
$ cscli collections install crowdsecurity/windows-firewallWindows : suspcious process creation (by sigmahq)
$ cscli collections install sigmahq/windows_proc_creation1 to 4 of 4 results