Add new rules in tag_windows.txt to application_execution tag - #4376

Open

lprat wants to merge 17 commits into

log2timeline:mainfrom

lprat:tag_app_execution

Commits on Nov 9, 2022

Add new rules for tag application_execution
lprat
authored
14c300a
Add test to new rules application_execution part 1
lprat
authored
8f4ee81

Commits on Nov 10, 2022

remove duplicate
lprat
authored
ea827c9
Add test to new rules application_execution part 2
lprat
authored
da61b0a
Update tag_windows.txt
lprat
authored
381e1ee
Add test to event 4798
lprat
authored
8f9570e
remove import registry default not used
lprat
authored
a5a7ee1

Commits on Nov 11, 2022

fix unescaped \
lprat
authored
d921240
fix lint long line & withespace
lprat
authored
2e733ca
fix long line & whitespace
lprat
authored
edd535d
fix lint whitespace
lprat
authored
80b2194

Commits on Nov 14, 2022

change json on registry test by plaso registry obj
lprat
authored
93abd0d
fix evt to evtx
lprat
authored
73a7290
fix evt to evtx part2!
lprat
authored
686183e
Fix error source_name in test
lprat
authored
78fdf93
fix error data type
lprat
authored
2b79463

Commits on Nov 17, 2022

rerun test error dependency
lprat
authored
737a960