Renaming according to issue #5

atc-project · Jun 19, 2020 · 5c98f18 · 5c98f18
1 parent 169cc0c
commit 5c98f18
Show file tree

Hide file tree

Showing 148 changed files with 0 additions and 0 deletions.
diff --git a/...DN_0001_4688_windows_process_creation.yml → .../DN0001_4688_windows_process_creation.yml b/...DN_0001_4688_windows_process_creation.yml → .../DN0001_4688_windows_process_creation.yml
diff --git a/...ows_process_creation_with_commandline.yml → ...ows_process_creation_with_commandline.yml b/...ows_process_creation_with_commandline.yml → ...ows_process_creation_with_commandline.yml
diff --git a/...003_1_windows_sysmon_process_creation.yml → ...003_1_windows_sysmon_process_creation.yml b/...003_1_windows_sysmon_process_creation.yml → ...003_1_windows_sysmon_process_creation.yml
diff --git a/...ed/DN_0004_4624_windows_account_logon.yml → ...ded/DN0004_4624_windows_account_logon.yml b/...ed/DN_0004_4624_windows_account_logon.yml → ...ded/DN0004_4624_windows_account_logon.yml
diff --git a/..._0005_7045_windows_service_insatalled.yml → ...N0005_7045_windows_service_insatalled.yml b/..._0005_7045_windows_service_insatalled.yml → ...N0005_7045_windows_service_insatalled.yml
diff --git a/..._process_changed_a_file_creation_time.yml → ..._process_changed_a_file_creation_time.yml b/..._process_changed_a_file_creation_time.yml → ..._process_changed_a_file_creation_time.yml
diff --git a/...7_3_windows_sysmon_network_connection.yml → ...7_3_windows_sysmon_network_connection.yml b/...7_3_windows_sysmon_network_connection.yml → ...7_3_windows_sysmon_network_connection.yml
diff --git a/...s_sysmon_sysmon_service_state_changed.yml → ...s_sysmon_sysmon_service_state_changed.yml b/...s_sysmon_sysmon_service_state_changed.yml → ...s_sysmon_sysmon_service_state_changed.yml
diff --git a/...9_5_windows_sysmon_process_terminated.yml → ...9_5_windows_sysmon_process_terminated.yml b/...9_5_windows_sysmon_process_terminated.yml → ...9_5_windows_sysmon_process_terminated.yml
diff --git a/...N_0010_6_windows_sysmon_driver_loaded.yml → ...DN0010_6_windows_sysmon_driver_loaded.yml b/...N_0010_6_windows_sysmon_driver_loaded.yml → ...DN0010_6_windows_sysmon_driver_loaded.yml
diff --git a/...DN_0011_7_windows_sysmon_image_loaded.yml → .../DN0011_7_windows_sysmon_image_loaded.yml b/...DN_0011_7_windows_sysmon_image_loaded.yml → .../DN0011_7_windows_sysmon_image_loaded.yml
diff --git a/...2_8_windows_sysmon_CreateRemoteThread.yml → ...2_8_windows_sysmon_CreateRemoteThread.yml b/...2_8_windows_sysmon_CreateRemoteThread.yml → ...2_8_windows_sysmon_CreateRemoteThread.yml
diff --git a/...N_0013_9_windows_sysmon_RawAccessRead.yml → ...DN0013_9_windows_sysmon_RawAccessRead.yml b/...N_0013_9_windows_sysmon_RawAccessRead.yml → ...DN0013_9_windows_sysmon_RawAccessRead.yml
diff --git a/..._0014_10_windows_sysmon_ProcessAccess.yml → ...N0014_10_windows_sysmon_ProcessAccess.yml b/..._0014_10_windows_sysmon_ProcessAccess.yml → ...N0014_10_windows_sysmon_ProcessAccess.yml
diff --git a/.../DN_0015_11_windows_sysmon_FileCreate.yml → ...d/DN0015_11_windows_sysmon_FileCreate.yml b/.../DN_0015_11_windows_sysmon_FileCreate.yml → ...d/DN0015_11_windows_sysmon_FileCreate.yml
diff --git a/..._0016_12_windows_sysmon_RegistryEvent.yml → ...N0016_12_windows_sysmon_RegistryEvent.yml b/..._0016_12_windows_sysmon_RegistryEvent.yml → ...N0016_12_windows_sysmon_RegistryEvent.yml
diff --git a/..._0017_13_windows_sysmon_RegistryEvent.yml → ...N0017_13_windows_sysmon_RegistryEvent.yml b/..._0017_13_windows_sysmon_RegistryEvent.yml → ...N0017_13_windows_sysmon_RegistryEvent.yml
diff --git a/..._0018_14_windows_sysmon_RegistryEvent.yml → ...N0018_14_windows_sysmon_RegistryEvent.yml b/..._0018_14_windows_sysmon_RegistryEvent.yml → ...N0018_14_windows_sysmon_RegistryEvent.yml
diff --git a/...5_windows_sysmon_FileCreateStreamHash.yml → ...5_windows_sysmon_FileCreateStreamHash.yml b/...5_windows_sysmon_FileCreateStreamHash.yml → ...5_windows_sysmon_FileCreateStreamHash.yml
diff --git a/...d/DN_0020_17_windows_sysmon_PipeEvent.yml → ...ed/DN0020_17_windows_sysmon_PipeEvent.yml b/...d/DN_0020_17_windows_sysmon_PipeEvent.yml → ...ed/DN0020_17_windows_sysmon_PipeEvent.yml
diff --git a/...d/DN_0021_18_windows_sysmon_PipeEvent.yml → ...ed/DN0021_18_windows_sysmon_PipeEvent.yml b/...d/DN_0021_18_windows_sysmon_PipeEvent.yml → ...ed/DN0021_18_windows_sysmon_PipeEvent.yml
diff --git a/...ed/DN_0022_19_windows_sysmon_WmiEvent.yml → ...ded/DN0022_19_windows_sysmon_WmiEvent.yml b/...ed/DN_0022_19_windows_sysmon_WmiEvent.yml → ...ded/DN0022_19_windows_sysmon_WmiEvent.yml
diff --git a/...ed/DN_0023_20_windows_sysmon_WmiEvent.yml → ...ded/DN0023_20_windows_sysmon_WmiEvent.yml b/...ed/DN_0023_20_windows_sysmon_WmiEvent.yml → ...ded/DN0023_20_windows_sysmon_WmiEvent.yml
diff --git a/...ed/DN_0024_21_windows_sysmon_WmiEvent.yml → ...ded/DN0024_21_windows_sysmon_WmiEvent.yml b/...ed/DN_0024_21_windows_sysmon_WmiEvent.yml → ...ded/DN0024_21_windows_sysmon_WmiEvent.yml
diff --git a/...directory_service_object_was_modified.yml → ...directory_service_object_was_modified.yml b/...directory_service_object_was_modified.yml → ...directory_service_object_was_modified.yml
diff --git a/...DN_0027_4738_user_account_was_changed.yml → .../DN0027_4738_user_account_was_changed.yml b/...DN_0027_4738_user_account_was_changed.yml → .../DN0027_4738_user_account_was_changed.yml
diff --git a/...vices_restore_mode_admin_password_set.yml → ...vices_restore_mode_admin_password_set.yml b/...vices_restore_mode_admin_password_set.yml → ...vices_restore_mode_admin_password_set.yml
diff --git a/...661_handle_to_an_object_was_requested.yml → ...661_handle_to_an_object_was_requested.yml b/...661_handle_to_an_object_was_requested.yml → ...661_handle_to_an_object_was_requested.yml
diff --git a/..._operation_was_performed_on_an_object.yml → ..._operation_was_performed_on_an_object.yml b/..._operation_was_performed_on_an_object.yml → ..._operation_was_performed_on_an_object.yml
diff --git a/.../DN_0031_7036_service_started_stopped.yml → ...d/DN0031_7036_service_started_stopped.yml b/.../DN_0031_7036_service_started_stopped.yml → ...d/DN0031_7036_service_started_stopped.yml
diff --git a/...rk_share_object_was_accessed_detailed.yml → ...rk_share_object_was_accessed_detailed.yml b/...rk_share_object_was_accessed_detailed.yml → ...rk_share_object_was_accessed_detailed.yml
diff --git a/...140_network_share_object_was_accessed.yml → ...140_network_share_object_was_accessed.yml b/...140_network_share_object_was_accessed.yml → ...140_network_share_object_was_accessed.yml
diff --git a/...eded/DN_0034_104_log_file_was_cleared.yml → ...eeded/DN0034_104_log_file_was_cleared.yml b/...eded/DN_0034_104_log_file_was_cleared.yml → ...eeded/DN0034_104_log_file_was_cleared.yml
diff --git a/...35_106_task_scheduler_task_registered.yml → ...35_106_task_scheduler_task_registered.yml b/...35_106_task_scheduler_task_registered.yml → ...35_106_task_scheduler_task_registered.yml
diff --git a/..._4104_windows_powershell_script_block.yml → ..._4104_windows_powershell_script_block.yml b/..._4104_windows_powershell_script_block.yml → ..._4104_windows_powershell_script_block.yml
diff --git a/...windows_powershell_executing_pipeline.yml → ...windows_powershell_executing_pipeline.yml b/...windows_powershell_executing_pipeline.yml → ...windows_powershell_executing_pipeline.yml
diff --git a/...ate_is_changed_from_none_to_available.yml → ...ate_is_changed_from_none_to_available.yml b/...ate_is_changed_from_none_to_available.yml → ...ate_is_changed_from_none_to_available.yml
diff --git a/...9_524_system_catalog_has_been_deleted.yml → ...9_524_system_catalog_has_been_deleted.yml b/...9_524_system_catalog_has_been_deleted.yml → ...9_524_system_catalog_has_been_deleted.yml
diff --git a/..._successfully_logged_on_to_a_computer.yml → ..._successfully_logged_on_to_a_computer.yml b/..._successfully_logged_on_to_a_computer.yml → ..._successfully_logged_on_to_a_computer.yml
diff --git a/data_needed/DN_0041_529_logon_failure.yml → data_needed/DN0041_529_logon_failure.yml b/data_needed/DN_0041_529_logon_failure.yml → data_needed/DN0041_529_logon_failure.yml
diff --git a/...675_kerberos_preauthentication_failed.yml → ...675_kerberos_preauthentication_failed.yml b/...675_kerberos_preauthentication_failed.yml → ...675_kerberos_preauthentication_failed.yml
diff --git a/...dns_server_plugin_dll_has_been_loaded.yml → ...dns_server_plugin_dll_has_been_loaded.yml b/...dns_server_plugin_dll_has_been_loaded.yml → ...dns_server_plugin_dll_has_been_loaded.yml
diff --git a/...ded/DN_0044_1000_application_crashed.yaml → ...eded/DN0044_1000_application_crashed.yaml b/...ded/DN_0044_1000_application_crashed.yaml → ...eded/DN0044_1000_application_crashed.yaml
diff --git a/...DN_0045_1001_windows_error_reporting.yaml → .../DN0045_1001_windows_error_reporting.yaml b/...DN_0045_1001_windows_error_reporting.yaml → .../DN0045_1001_windows_error_reporting.yaml
diff --git a/...lout_dll_file_has_caused_an_exception.yml → ...lout_dll_file_has_caused_an_exception.yml b/...lout_dll_file_has_caused_an_exception.yml → ...lout_dll_file_has_caused_an_exception.yml
diff --git a/...lout_dll_file_has_caused_an_exception.yml → ...lout_dll_file_has_caused_an_exception.yml b/...lout_dll_file_has_caused_an_exception.yml → ...lout_dll_file_has_caused_an_exception.yml
diff --git a/...vice_successfully_loaded_callout_dlls.yml → ...vice_successfully_loaded_callout_dlls.yml b/...vice_successfully_loaded_callout_dlls.yml → ...vice_successfully_loaded_callout_dlls.yml
diff --git a/...p_service_failed_to_load_callout_dlls.yml → ...p_service_failed_to_load_callout_dlls.yml b/...p_service_failed_to_load_callout_dlls.yml → ...p_service_failed_to_load_callout_dlls.yml
diff --git a/...ed/DN_0050_1102_audit_log_was_cleared.yml → ...ded/DN0050_1102_audit_log_was_cleared.yml b/...ed/DN_0050_1102_audit_log_was_cleared.yml → ...ded/DN0050_1102_audit_log_was_cleared.yml
diff --git a/...surface_reduction_blocking_mode_event.yml → ...surface_reduction_blocking_mode_event.yml b/...surface_reduction_blocking_mode_event.yml → ...surface_reduction_blocking_mode_event.yml
diff --git a/...N_0052_2003_query_to_load_usb_drivers.yml → ...DN0052_2003_query_to_load_usb_drivers.yml b/...N_0052_2003_query_to_load_usb_drivers.yml → ...DN0052_2003_query_to_load_usb_drivers.yml
diff --git a/...pnp_or_power_operation_for_usb_device.yml → ...pnp_or_power_operation_for_usb_device.yml b/...pnp_or_power_operation_for_usb_device.yml → ...pnp_or_power_operation_for_usb_device.yml
diff --git a/...pnp_or_power_operation_for_usb_device.yml → ...pnp_or_power_operation_for_usb_device.yml b/...pnp_or_power_operation_for_usb_device.yml → ...pnp_or_power_operation_for_usb_device.yml
diff --git a/data_needed/DN_0054_linux_auditd_execve.yml → data_needed/DN0054_linux_auditd_execve.yml b/data_needed/DN_0054_linux_auditd_execve.yml → data_needed/DN0054_linux_auditd_execve.yml
diff --git a/...0055_linux_auditd_read_access_to_file.yml → ...0055_linux_auditd_read_access_to_file.yml b/...0055_linux_auditd_read_access_to_file.yml → ...0055_linux_auditd_read_access_to_file.yml
diff --git a/data_needed/DN_0056_linux_auditd_syscall.yml → data_needed/DN0056_linux_auditd_syscall.yml b/data_needed/DN_0056_linux_auditd_syscall.yml → data_needed/DN0056_linux_auditd_syscall.yml
diff --git a/.../DN_0057_4625_account_failed_to_logon.yml → ...d/DN0057_4625_account_failed_to_logon.yml b/.../DN_0057_4625_account_failed_to_logon.yml → ...d/DN0057_4625_account_failed_to_logon.yml
diff --git a/...656_handle_to_an_object_was_requested.yml → ...656_handle_to_an_object_was_requested.yml b/...656_handle_to_an_object_was_requested.yml → ...656_handle_to_an_object_was_requested.yml
diff --git a/...0059_4657_registry_value_was_modified.yml → ...0059_4657_registry_value_was_modified.yml b/...0059_4657_registry_value_was_modified.yml → ...0059_4657_registry_value_was_modified.yml
diff --git a/...0_4658_handle_to_an_object_was_closed.yml → ...0_4658_handle_to_an_object_was_closed.yml b/...0_4658_handle_to_an_object_was_closed.yml → ...0_4658_handle_to_an_object_was_closed.yml
diff --git a/...eeded/DN_0061_4660_object_was_deleted.yml → ...needed/DN0061_4660_object_was_deleted.yml b/...eeded/DN_0061_4660_object_was_deleted.yml → ...needed/DN0061_4660_object_was_deleted.yml
diff --git a/..._attempt_was_made_to_access_an_object.yml → ..._attempt_was_made_to_access_an_object.yml b/..._attempt_was_made_to_access_an_object.yml → ..._attempt_was_made_to_access_an_object.yml
diff --git a/...7_service_was_installed_in_the_system.yml → ...7_service_was_installed_in_the_system.yml b/...7_service_was_installed_in_the_system.yml → ...7_service_was_installed_in_the_system.yml
diff --git a/..._0064_4698_scheduled_task_was_created.yml → ...N0064_4698_scheduled_task_was_created.yml b/..._0064_4698_scheduled_task_was_created.yml → ...N0064_4698_scheduled_task_was_created.yml
diff --git a/...0065_4701_scheduled_task_was_disabled.yml → ...0065_4701_scheduled_task_was_disabled.yml b/...0065_4701_scheduled_task_was_disabled.yml → ...0065_4701_scheduled_task_was_disabled.yml
diff --git a/.../DN_0066_4704_user_right_was_assigned.yml → ...d/DN0066_4704_user_right_was_assigned.yml b/.../DN_0066_4704_user_right_was_assigned.yml → ...d/DN0066_4704_user_right_was_assigned.yml
diff --git a/..._4719_system_audit_policy_was_changed.yml → ..._4719_system_audit_policy_was_changed.yml b/..._4719_system_audit_policy_was_changed.yml → ..._4719_system_audit_policy_was_changed.yml
diff --git a/...dded_to_security_enabled_global_group.yml → ...dded_to_security_enabled_global_group.yml b/...dded_to_security_enabled_global_group.yml → ...dded_to_security_enabled_global_group.yml
diff --git a/...added_to_security_enabled_local_group.yml → ...added_to_security_enabled_local_group.yml b/...added_to_security_enabled_local_group.yml → ...added_to_security_enabled_local_group.yml
diff --git a/...urity_enabled_local_group_was_changed.yml → ...urity_enabled_local_group_was_changed.yml b/...urity_enabled_local_group_was_changed.yml → ...urity_enabled_local_group_was_changed.yml
diff --git a/...rity_enabled_global_group_was_changed.yml → ...rity_enabled_global_group_was_changed.yml b/...rity_enabled_global_group_was_changed.yml → ...rity_enabled_global_group_was_changed.yml
diff --git a/...y_enabled_universal_group_was_changed.yml → ...y_enabled_universal_group_was_changed.yml b/...y_enabled_universal_group_was_changed.yml → ...y_enabled_universal_group_was_changed.yml
diff --git a/...to_a_security_enabled_universal_group.yml → ...to_a_security_enabled_universal_group.yml b/...to_a_security_enabled_universal_group.yml → ...to_a_security_enabled_universal_group.yml
diff --git a/...5_sid_history_was_added_to_an_account.yml → ...5_sid_history_was_added_to_an_account.yml b/...5_sid_history_was_added_to_an_account.yml → ...5_sid_history_was_added_to_an_account.yml
diff --git a/..._add_sid_history_to_an_account_failed.yml → ..._add_sid_history_to_an_account_failed.yml b/..._add_sid_history_to_an_account_failed.yml → ..._add_sid_history_to_an_account_failed.yml
diff --git a/...s_authentication_ticket_was_requested.yml → ...s_authentication_ticket_was_requested.yml b/...s_authentication_ticket_was_requested.yml → ...s_authentication_ticket_was_requested.yml
diff --git a/...kerberos_service_ticket_was_requested.yml → ...kerberos_service_ticket_was_requested.yml b/...kerberos_service_ticket_was_requested.yml → ...kerberos_service_ticket_was_requested.yml
diff --git a/...71_kerberos_pre_authentication_failed.yml → ...71_kerberos_pre_authentication_failed.yml b/...71_kerberos_pre_authentication_failed.yml → ...71_kerberos_pre_authentication_failed.yml
diff --git a/...lidate_the_credentials_for_an_account.yml → ...lidate_the_credentials_for_an_account.yml b/...lidate_the_credentials_for_an_account.yml → ...lidate_the_credentials_for_an_account.yml
diff --git a/data_needed/DN_0080_5859_wmi_activity.yml → data_needed/DN0080_5859_wmi_activity.yml b/data_needed/DN_0080_5859_wmi_activity.yml → data_needed/DN0080_5859_wmi_activity.yml
diff --git a/data_needed/DN_0081_5861_wmi_activity.yml → data_needed/DN0081_5861_wmi_activity.yml b/data_needed/DN_0081_5861_wmi_activity.yml → data_needed/DN0081_5861_wmi_activity.yml
diff --git a/...N_0082_8002_ntlm_server_blocked_audit.yml → ...DN0082_8002_ntlm_server_blocked_audit.yml b/...N_0082_8002_ntlm_server_blocked_audit.yml → ...DN0082_8002_ntlm_server_blocked_audit.yml
diff --git a/...16_access_history_in_hive_was_cleared.yml → ...16_access_history_in_hive_was_cleared.yml b/...16_access_history_in_hive_was_cleared.yml → ...16_access_history_in_hive_was_cleared.yml
diff --git a/data_needed/DN_0084_av_alert.yml → data_needed/DN0084_av_alert.yml b/data_needed/DN_0084_av_alert.yml → data_needed/DN0084_av_alert.yml
diff --git a/...ed/DN_0085_22_windows_sysmon_DnsQuery.yml → ...ded/DN0085_22_windows_sysmon_DnsQuery.yml b/...ed/DN_0085_22_windows_sysmon_DnsQuery.yml → ...ded/DN0085_22_windows_sysmon_DnsQuery.yml
diff --git a/...DN_0086_4720_user_account_was_created.yml → .../DN0086_4720_user_account_was_created.yml b/...DN_0086_4720_user_account_was_created.yml → .../DN0086_4720_user_account_was_created.yml
diff --git a/...ing_platform_has_permitted_connection.yml → ...ing_platform_has_permitted_connection.yml b/...ing_platform_has_permitted_connection.yml → ...ing_platform_has_permitted_connection.yml
diff --git a/.../DN_0088_4616_system_time_was_changed.yml → ...d/DN0088_4616_system_time_was_changed.yml b/.../DN_0088_4616_system_time_was_changed.yml → ...d/DN0088_4616_system_time_was_changed.yml
diff --git a/...rver_security_layer_detected_an_error.yml → ...rver_security_layer_detected_an_error.yml b/...rver_security_layer_detected_an_error.yml → ...rver_security_layer_detected_an_error.yml
diff --git a/...rver_security_layer_detected_an_error.yml → ...rver_security_layer_detected_an_error.yml b/...rver_security_layer_detected_an_error.yml → ...rver_security_layer_detected_an_error.yml
diff --git a/..._needed/DN_0091_linux_modsecurity_log.yml → data_needed/DN0091_linux_modsecurity_log.yml b/..._needed/DN_0091_linux_modsecurity_log.yml → data_needed/DN0091_linux_modsecurity_log.yml
diff --git a/data_needed/DN_0092_unix_generic_syslog.yml → data_needed/DN0092_unix_generic_syslog.yml b/data_needed/DN_0092_unix_generic_syslog.yml → data_needed/DN0092_unix_generic_syslog.yml
diff --git a/data_needed/DN_0093_linux_clamav_log.yml → data_needed/DN0093_linux_clamav_log.yml b/data_needed/DN_0093_linux_clamav_log.yml → data_needed/DN0093_linux_clamav_log.yml
diff --git a/data_needed/DN_0094_linux_sshd_log.yml → data_needed/DN0094_linux_sshd_log.yml b/data_needed/DN_0094_linux_sshd_log.yml → data_needed/DN0094_linux_sshd_log.yml
diff --git a/data_needed/DN_0095_linux_auth_pam_log.yml → data_needed/DN0095_linux_auth_pam_log.yml b/data_needed/DN_0095_linux_auth_pam_log.yml → data_needed/DN0095_linux_auth_pam_log.yml
diff --git a/..._0096_linux_named_client_security_log.yml → ...N0096_linux_named_client_security_log.yml b/..._0096_linux_named_client_security_log.yml → ...N0096_linux_named_client_security_log.yml
diff --git a/data_needed/DN_0097_linux_daemon_log.yml → data_needed/DN0097_linux_daemon_log.yml b/data_needed/DN_0097_linux_daemon_log.yml → data_needed/DN0097_linux_daemon_log.yml
diff --git a/data_needed/DN_0098_linux_vsftpd_log.yml → data_needed/DN0098_linux_vsftpd_log.yml b/data_needed/DN_0098_linux_vsftpd_log.yml → data_needed/DN0098_linux_vsftpd_log.yml
diff --git a/data_needed/DN_0099_Bind_DNS_query.yml → data_needed/DN0099_Bind_DNS_query.yml b/data_needed/DN_0099_Bind_DNS_query.yml → data_needed/DN0099_Bind_DNS_query.yml
diff --git a/data_needed/DN_0100_Passive_DNS_log.yml → data_needed/DN0100_Passive_DNS_log.yml b/data_needed/DN_0100_Passive_DNS_log.yml → data_needed/DN0100_Passive_DNS_log.yml
diff --git a/...108_150_dns_server_could_not_load_dll.yml → ...108_150_dns_server_could_not_load_dll.yml b/...108_150_dns_server_could_not_load_dll.yml → ...108_150_dns_server_could_not_load_dll.yml
diff --git a/.../EN_0001_cache_sysmon_event_id_1_info.yml → ...s/EN0001_cache_sysmon_event_id_1_info.yml b/.../EN_0001_cache_sysmon_event_id_1_info.yml → ...s/EN0001_cache_sysmon_event_id_1_info.yml
diff --git a/...ch_sysmon_event_id_1_with_parent_info.yml → ...ch_sysmon_event_id_1_with_parent_info.yml b/...ch_sysmon_event_id_1_with_parent_info.yml → ...ch_sysmon_event_id_1_with_parent_info.yml
diff --git a/...er_sysmon_events_with_event_id_1_data.yml → ...er_sysmon_events_with_event_id_1_data.yml b/...er_sysmon_events_with_event_id_1_data.yml → ...er_sysmon_events_with_event_id_1_data.yml
diff --git a/..._id_11_with_TargetFilePathFingerprint.yml → ..._id_11_with_TargetFilePathFingerprint.yml b/..._id_11_with_TargetFilePathFingerprint.yml → ..._id_11_with_TargetFilePathFingerprint.yml
diff --git a/...rint_from_enriched_sysmon_event_id_11.yml → ...rint_from_enriched_sysmon_event_id_11.yml b/...rint_from_enriched_sysmon_event_id_11.yml → ...rint_from_enriched_sysmon_event_id_11.yml
diff --git a/...P_0001_windows_audit_process_creation.yml → ...LP0001_windows_audit_process_creation.yml b/...P_0001_windows_audit_process_creation.yml → ...LP0001_windows_audit_process_creation.yml
diff --git a/...dit_process_creation_with_commandline.yml → ...dit_process_creation_with_commandline.yml b/...dit_process_creation_with_commandline.yml → ...dit_process_creation_with_commandline.yml
diff --git a/..._0003_windows_sysmon_process_creation.yml → ...P0003_windows_sysmon_process_creation.yml b/..._0003_windows_sysmon_process_creation.yml → ...P0003_windows_sysmon_process_creation.yml
diff --git a/..._policies/LP_0004_windows_audit_logon.yml → ...g_policies/LP0004_windows_audit_logon.yml b/..._policies/LP_0004_windows_audit_logon.yml → ...g_policies/LP0004_windows_audit_logon.yml
diff --git a/...005_windows_sysmon_network_connection.yml → ...005_windows_sysmon_network_connection.yml b/...005_windows_sysmon_network_connection.yml → ...005_windows_sysmon_network_connection.yml
diff --git a/...s/LP_0006_windows_sysmon_image_loaded.yml → ...es/LP0006_windows_sysmon_image_loaded.yml b/...s/LP_0006_windows_sysmon_image_loaded.yml → ...es/LP0006_windows_sysmon_image_loaded.yml
diff --git a/.../LP_0007_windows_sysmon_ProcessAccess.yml → ...s/LP0007_windows_sysmon_ProcessAccess.yml b/.../LP_0007_windows_sysmon_ProcessAccess.yml → ...s/LP0007_windows_sysmon_ProcessAccess.yml
diff --git a/...ies/LP_0008_windows_sysmon_FileCreate.yml → ...cies/LP0008_windows_sysmon_FileCreate.yml b/...ies/LP_0008_windows_sysmon_FileCreate.yml → ...cies/LP0008_windows_sysmon_FileCreate.yml
diff --git a/...cies/LP_0009_windows_sysmon_PipeEvent.yml → ...icies/LP0009_windows_sysmon_PipeEvent.yml b/...cies/LP_0009_windows_sysmon_PipeEvent.yml → ...icies/LP0009_windows_sysmon_PipeEvent.yml
diff --git a/...icies/LP_0010_windows_sysmon_WmiEvent.yml → ...licies/LP0010_windows_sysmon_WmiEvent.yml b/...icies/LP_0010_windows_sysmon_WmiEvent.yml → ...licies/LP0010_windows_sysmon_WmiEvent.yml
diff --git a/...icies/LP_0011_windows_sysmon_DnsQuery.yml → ...licies/LP0011_windows_sysmon_DnsQuery.yml b/...icies/LP_0011_windows_sysmon_DnsQuery.yml → ...licies/LP0011_windows_sysmon_DnsQuery.yml
diff --git a/...ndows_audit_directory_service_changes.yml → ...ndows_audit_directory_service_changes.yml b/...ndows_audit_directory_service_changes.yml → ...ndows_audit_directory_service_changes.yml
diff --git a/...windows_audit_user_account_management.yml → ...windows_audit_user_account_management.yml b/...windows_audit_user_account_management.yml → ...windows_audit_user_account_management.yml
diff --git a/...indows_audit_directory_service_access.yml → ...indows_audit_directory_service_access.yml b/...indows_audit_directory_service_access.yml → ...indows_audit_directory_service_access.yml
diff --git a/...ng_policies/LP_0028_windows_audit_sam.yml → ...ing_policies/LP0028_windows_audit_sam.yml b/...ng_policies/LP_0028_windows_audit_sam.yml → ...ing_policies/LP0028_windows_audit_sam.yml
diff --git a/...029_windows_audit_detailed_file_share.yml → ...029_windows_audit_detailed_file_share.yml b/...029_windows_audit_detailed_file_share.yml → ...029_windows_audit_detailed_file_share.yml
diff --git a/...cies/LP_0030_windows_audit_file_share.yml → ...icies/LP0030_windows_audit_file_share.yml b/...cies/LP_0030_windows_audit_file_share.yml → ...icies/LP0030_windows_audit_file_share.yml
diff --git a/..._policies/LP_0031_linux_auditd_execve.yml → ...g_policies/LP0031_linux_auditd_execve.yml b/..._policies/LP_0031_linux_auditd_execve.yml → ...g_policies/LP0031_linux_auditd_execve.yml
diff --git a/...0032_linux_auditd_read_access_to_file.yml → ...0032_linux_auditd_read_access_to_file.yml b/...0032_linux_auditd_read_access_to_file.yml → ...0032_linux_auditd_read_access_to_file.yml
diff --git a/...policies/LP_0033_linux_auditd_syscall.yml → ..._policies/LP0033_linux_auditd_syscall.yml b/...policies/LP_0033_linux_auditd_syscall.yml → ..._policies/LP0033_linux_auditd_syscall.yml
diff --git a/..._0034_linux_named_client_security_log.yml → ...P0034_linux_named_client_security_log.yml b/..._0034_linux_named_client_security_log.yml → ...P0034_linux_named_client_security_log.yml
diff --git a/...037_windows_audit_audit_policy_change.yml → ...037_windows_audit_audit_policy_change.yml b/...037_windows_audit_audit_policy_change.yml → ...037_windows_audit_audit_policy_change.yml
diff --git a/...audit_kerberos_authentication_service.yml → ...audit_kerberos_authentication_service.yml b/...audit_kerberos_authentication_service.yml → ...audit_kerberos_authentication_service.yml
diff --git a/...s/LP_0039_windows_audit_kernel_object.yml → ...es/LP0039_windows_audit_kernel_object.yml b/...s/LP_0039_windows_audit_kernel_object.yml → ...es/LP0039_windows_audit_kernel_object.yml
diff --git a/...dows_audit_other_object_access_events.yml → ...dows_audit_other_object_access_events.yml b/...dows_audit_other_object_access_events.yml → ...dows_audit_other_object_access_events.yml
diff --git a/...042_windows_audit_handle_manipulation.yml → ...042_windows_audit_handle_manipulation.yml b/...042_windows_audit_handle_manipulation.yml → ...042_windows_audit_handle_manipulation.yml
diff --git a/...g_policies/LP_0044_windows_ntlm_audit.yml → ...ng_policies/LP0044_windows_ntlm_audit.yml b/...g_policies/LP_0044_windows_ntlm_audit.yml → ...ng_policies/LP0044_windows_ntlm_audit.yml
diff --git a/...s_audit_filtering_platform_connection.yml → ...s_audit_filtering_platform_connection.yml b/...s_audit_filtering_platform_connection.yml → ...s_audit_filtering_platform_connection.yml
diff --git a/...6_windows_audit_security_state_change.yml → ...6_windows_audit_security_state_change.yml b/...6_windows_audit_security_state_change.yml → ...6_windows_audit_security_state_change.yml
diff --git a/...ing_policies/LP_0047_BIND_DNS_queries.yml → logging_policies/LP0047_BIND_DNS_queries.yml b/...ing_policies/LP_0047_BIND_DNS_queries.yml → logging_policies/LP0047_BIND_DNS_queries.yml
diff --git a/..._policies/LP_0048_Passive_DNS_logging.yml → ...g_policies/LP0048_Passive_DNS_logging.yml b/..._policies/LP_0048_Passive_DNS_logging.yml → ...g_policies/LP0048_Passive_DNS_logging.yml
diff --git a/...ndows_audit_security_system_extension.yml → ...ndows_audit_security_system_extension.yml b/...ndows_audit_security_system_extension.yml → ...ndows_audit_security_system_extension.yml
diff --git a/...ndows_audit_security_group_management.yml → ...ndows_audit_security_group_management.yml b/...ndows_audit_security_group_management.yml → ...ndows_audit_security_group_management.yml
diff --git a/...ies/LP_0102_windows_audit_file_system.yml → ...cies/LP0102_windows_audit_file_system.yml b/...ies/LP_0102_windows_audit_file_system.yml → ...cies/LP0102_windows_audit_file_system.yml
diff --git a/...licies/LP_0103_windows_audit_registry.yml → ...olicies/LP0103_windows_audit_registry.yml b/...licies/LP_0103_windows_audit_registry.yml → ...olicies/LP0103_windows_audit_registry.yml
diff --git a/..._0104_windows_audit_removable_storage.yml → ...P0104_windows_audit_removable_storage.yml b/..._0104_windows_audit_removable_storage.yml → ...P0104_windows_audit_removable_storage.yml
diff --git a/...ows_audit_authorization_policy_change.yml → ...ows_audit_authorization_policy_change.yml b/...ows_audit_authorization_policy_change.yml → ...ows_audit_authorization_policy_change.yml
diff --git a/...it_kerberos_service_ticket_operations.yml → ...it_kerberos_service_ticket_operations.yml b/...it_kerberos_service_ticket_operations.yml → ...it_kerberos_service_ticket_operations.yml
diff --git a/...7_windows_audit_credential_validation.yml → ...7_windows_audit_credential_validation.yml b/...7_windows_audit_credential_validation.yml → ...7_windows_audit_credential_validation.yml
diff --git a/...108_windows_powershell_module_logging.yml → ...108_windows_powershell_module_logging.yml b/...108_windows_powershell_module_logging.yml → ...108_windows_powershell_module_logging.yml
diff --git a/...9_windows_powershell_script_block_log.yml → ...9_windows_powershell_script_block_log.yml b/...9_windows_powershell_script_block_log.yml → ...9_windows_powershell_script_block_log.yml
diff --git a/...LP_0110_windows_powershell_transcript.yml → .../LP0110_windows_powershell_transcript.yml b/...LP_0110_windows_powershell_transcript.yml → .../LP0110_windows_powershell_transcript.yml