Frank Block

The "NewValue" field for Windows Defender should be "New Value"

17

The detection of Windows Defender Exclusions within `windows/builtin/windefend/win_defender_exclusions.yml` fails since it uses the `NewValue` field instead of `New Value`.

Fixes transition-PDEs being treated as large pages

4

For windows, the overloaded _page_is_valid is used (from WindowsMixin), which also returns true if a PTE/PDE is in transition state. While this is fine for most cases (normal/4kb pages resp....

Potential bug in Log4jVulnHunter.yaml

1

The file [Log4jVulnHunter.yaml](https://github.com/Velocidex/velociraptor-docs/tree/master/content/exchange/artifacts/Log4jVulnHunter.yaml) causes multiple instances of the following errors and finishes in ERROR state. ``` glob: Field root Expecting a path arg type, not *url.URL ``` and ``` Symbol...