Commits

Branch selector

 master

User selector

rabbitstack

Datepicker

All time

Commit History

Commits on Jul 15, 2023

• Rename kstreamc_* source files to consumer_* (rabbitstack#182)

  rabbitstack

  authored
  da6710e

  Copy full SHA for da6710e

• Refactor function comment and improve test (rabbitstack#181)

  rabbitstack

  authored
  31f9776

  Copy full SHA for 31f9776

Commits on Jul 13, 2023

• Refactor the image signature validation to untangle signature check/verification from certificate fetching. Also, add a new enumeration value for file verified signature types. (rabbitstack#180)

  rabbitstack

  authored
  01f523d

  Copy full SHA for 01f523d

Commits on Jun 30, 2023

• chore: Move backlog logic to event queue (rabbitstack#179)

  Show description for 9380d58
  rabbitstack

  authored
  9380d58

  Copy full SHA for 9380d58

Commits on Jun 28, 2023

• chore: Sunset Antimalware provider consumer (rabbitstack#177)

  Show description for 761bd56
  rabbitstack

  authored
  761bd56

  Copy full SHA for 761bd56

Commits on Jun 26, 2023

• feat: Certifcate params/filter fields in PE images (rabbitstack#176)

  Show description for 4d0c014
  rabbitstack

  authored
  4d0c014

  Copy full SHA for 4d0c014

Commits on Jun 19, 2023

• Use only the rule name instead of an entire structure in the field deprecation warning message (rabbitstack#174)

  rabbitstack

  authored
  b66d2ad

  Copy full SHA for b66d2ad

Commits on Jun 14, 2023

• feat(kevent): Map and unmap view file events (rabbitstack#172)

  Show description for 7480862
  rabbitstack

  authored
  7480862

  Copy full SHA for 7480862

• Introduce support for DuplicateHandle event. As its name suggests, this event is captured as a response to the handle duplication operations. (rabbitstack#173)

  rabbitstack

  authored
  2a000a8

  Copy full SHA for 2a000a8

Commits on Jun 4, 2023

• feat(kevent): VirtualAlloc and VirtualFree events (rabbitstack#171)

  Show description for ac9cc7f
  rabbitstack

  authored
  ac9cc7f

  Copy full SHA for ac9cc7f

Commits on May 29, 2023

• feat(kevent): Introduce image signature event parameters and rule macros (rabbitstack#169)

  Show description for f279019
  rabbitstack

  authored
  f279019

  Copy full SHA for f279019

Commits on May 24, 2023

• refactor: "The Great Overhaul" (rabbitstack#168)

  Show description for 59c4948
  rabbitstack

  authored
  59c4948

  Copy full SHA for 59c4948

Commits on Apr 11, 2023

• Create CODE_OF_CONDUCT.md

  rabbitstack

  authored
  67912d8

  Copy full SHA for 67912d8

• Fix typo

  rabbitstack

  authored
  919b3b8

  Copy full SHA for 919b3b8

• Include link to rules docs

  rabbitstack

  authored
  f4c8cd2

  Copy full SHA for f4c8cd2

• Create FUNDING.yml

  rabbitstack

  authored
  94d441f

  Copy full SHA for 94d441f

Commits on Mar 31, 2023

• docs: Docs for the version 1.10.0 (rabbitstack#162)

  Show description for 6ff3913
  rabbitstack

  authored
  6ff3913

  Copy full SHA for 6ff3913

• Merge remote-tracking branch 'origin/master'

  rabbitstack

  committed
  8439dee

  Copy full SHA for 8439dee

• fix rule syntax and rename libcrypto DLL to meet loader expectations

  rabbitstack

  committed
  8858690

  Copy full SHA for 8858690

• chore(pe): Replace standard library PE parser with saferwall parser (rabbitstack#161)

  Show description for 9e95d69
  rabbitstack

  authored
  9e95d69

  Copy full SHA for 9e95d69

• use ps.uuid field for connecting the events

  rabbitstack

  committed
  ae9939d

  Copy full SHA for ae9939d

Commits on Mar 28, 2023

• migrate from deprecated filter fields, expand rundll32.exe proxy execution command line matches

  rabbitstack

  committed
  ba64664

  Copy full SHA for ba64664

Commits on Mar 27, 2023

• feat(filter): Process UUID field (rabbitstack#159)

  Show description for 51bfb3c
  rabbitstack

  authored
  51bfb3c

  Copy full SHA for 51bfb3c

Commits on Mar 24, 2023

• generic event parameter filter extractor (rabbitstack#160)

  rabbitstack

  authored
  a9cc41e

  Copy full SHA for a9cc41e

• feat(filter): Filter fields deprecations (rabbitstack#158)

  Show description for d3a4a0f
  rabbitstack

  authored
  d3a4a0f

  Copy full SHA for d3a4a0f

Commits on Mar 23, 2023

• chore(filter): Optimize filter accessors (rabbitstack#157)

  Show description for dcb5ccc
  rabbitstack

  authored
  dcb5ccc

  Copy full SHA for dcb5ccc

Commits on Mar 22, 2023

• feat(rules): Implement more credentials access detection tradecraft (rabbitstack#156)

  Show description for 8625208
  rabbitstack

  authored
  8625208

  Copy full SHA for 8625208

Commits on Mar 8, 2023

• ensure correctness of bound field references (rabbitstack#155)

  rabbitstack

  authored
  3573d40

  Copy full SHA for 3573d40

Commits on Jan 19, 2023

• feat(filter): YARA filter function (rabbitstack#147)

  Show description for 9b34161
  rabbitstack

  authored
  9b34161

  Copy full SHA for 9b34161

Commits on Jan 17, 2023

• feat(filter): Function for getting registry values (rabbitstack#145)

  Show description for a6d30eb
  rabbitstack

  authored
  a6d30eb

  Copy full SHA for a6d30eb

• feat(filter): File path filter functions (rabbitstack#144)

  Show description for c715a47
  rabbitstack

  authored
  c715a47

  Copy full SHA for c715a47

• move sequence length check after sequence nil check

  rabbitstack

  committed
  87d4a5a

  Copy full SHA for 87d4a5a

Commits on Dec 22, 2022

• feat(rules): Bound fields (rabbitstack#143)

  Show description for b943f4c
  rabbitstack

  authored
  b943f4c

  Copy full SHA for b943f4c

Commits on Dec 15, 2022

• feat(rules): Decommission sequence policies (rabbitstack#142)

  Show description for aa514e2
  rabbitstack

  authored
  aa514e2

  Copy full SHA for aa514e2

Commits on Nov 30, 2022

• docs: Documentation for version 1.8.0 (rabbitstack#139)

  Show description for 286afff
  rabbitstack

  authored
  286afff

  Copy full SHA for 286afff

Pagination

Previous

Next