Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Rule Tuning] Startup or Run Key Registry Modification #3367

Merged
merged 5 commits into from
Feb 5, 2024
Merged

[Rule Tuning] Startup or Run Key Registry Modification #3367

merged 5 commits into from
Feb 5, 2024

Conversation

w0rk3r
Copy link
Contributor

@w0rk3r w0rk3r commented Jan 5, 2024

Issues

Resolves #3357

Summary

Reduces FPs by ~90%

@w0rk3r w0rk3r added Rule: Tuning tweaking or tuning an existing rule OS: Windows windows related rules Domain: Endpoint backport: auto labels Jan 5, 2024
@w0rk3r w0rk3r self-assigned this Jan 5, 2024
This was referenced Jan 5, 2024
Closed
Closed
terrancedejesus
terrancedejesus approved these changes Jan 16, 2024
View reviewed changes
Copy link
Collaborator

@terrancedejesus terrancedejesus left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Tuning looks good to remove some of the LGHub and MS Edge exceptions.

@w0rk3r w0rk3r merged commit edd3556 into main Feb 5, 2024
13 checks passed
@w0rk3r w0rk3r deleted the rt_startup_pers branch February 5, 2024 15:28
protectionsmachine pushed a commit that referenced this pull request Feb 5, 2024
@w0rk3r @github-actions
[Rule Tuning] Startup or Run Key Registry Modification (#3367)
2c6b903 
(cherry picked from commit edd3556)
protectionsmachine pushed a commit that referenced this pull request Feb 5, 2024
@w0rk3r @github-actions
[Rule Tuning] Startup or Run Key Registry Modification (#3367)
c46580c 
(cherry picked from commit edd3556)
protectionsmachine pushed a commit that referenced this pull request Feb 5, 2024
@w0rk3r @github-actions
[Rule Tuning] Startup or Run Key Registry Modification (#3367)
a2b8dfa 
(cherry picked from commit edd3556)
protectionsmachine pushed a commit that referenced this pull request Feb 5, 2024
@w0rk3r @github-actions
[Rule Tuning] Startup or Run Key Registry Modification (#3367)
114acb3 
(cherry picked from commit edd3556)
protectionsmachine pushed a commit that referenced this pull request Feb 5, 2024
@w0rk3r @github-actions
[Rule Tuning] Startup or Run Key Registry Modification (#3367)
94a9516 
(cherry picked from commit edd3556)
protectionsmachine pushed a commit that referenced this pull request Feb 5, 2024
@w0rk3r @github-actions
[Rule Tuning] Startup or Run Key Registry Modification (#3367)
04ef2cc 
(cherry picked from commit edd3556)
protectionsmachine pushed a commit that referenced this pull request Feb 5, 2024
@w0rk3r @github-actions
[Rule Tuning] Startup or Run Key Registry Modification (#3367)
129d9e4 
(cherry picked from commit edd3556)
protectionsmachine pushed a commit that referenced this pull request Feb 5, 2024
@w0rk3r @github-actions
[Rule Tuning] Startup or Run Key Registry Modification (#3367)
f58d793 
(cherry picked from commit edd3556)
protectionsmachine pushed a commit that referenced this pull request Feb 5, 2024
@w0rk3r @github-actions
[Rule Tuning] Startup or Run Key Registry Modification (#3367)
5edd21a 
(cherry picked from commit edd3556)
protectionsmachine pushed a commit that referenced this pull request Feb 5, 2024
@w0rk3r @github-actions
[Rule Tuning] Startup or Run Key Registry Modification (#3367)
7a6eafb 
(cherry picked from commit edd3556)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@Aegrah Aegrah Aegrah approved these changes

@terrancedejesus terrancedejesus terrancedejesus approved these changes

@brokensound77 brokensound77 Awaiting requested review from brokensound77

@DefSecSentinel DefSecSentinel Awaiting requested review from DefSecSentinel

@imays11 imays11 Awaiting requested review from imays11

@Samirbous Samirbous Awaiting requested review from Samirbous

@shashank-elastic shashank-elastic Awaiting requested review from shashank-elastic

Assignees

@w0rk3r w0rk3r

Labels
Area: RAD backport: auto Domain: Endpoint OS: Windows windows related rules Rule: Tuning tweaking or tuning an existing rule
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

[Rule Tuning] Startup or Run Key Registry Modification
3 participants
@w0rk3r @Aegrah @terrancedejesus