Commits

Branch selector

 master

User selector

All users

Datepicker

All time

Commit History

Commits on Sep 10, 2023

• Merge PR SigmaHQ#4435 from @frack113 - Update Fsutil Suspicious Invocation

  Show description for 3097920
  

  frack113

  and

  nasbench

  authored
  3097920

  Copy full SHA for 3097920

• Merge PR SigmaHQ#4434 from @wagga40 - Update/Fix Rule Logic

  Show description for 44d9d9e
  wagga40

  authored
  44d9d9e

  Copy full SHA for 44d9d9e

Commits on Sep 8, 2023

• Merge PR SigmaHQ#4431 from @phantinuss - Fix False Positives Found In Testing

  Show description for 6aaa439
  phantinuss

  authored
  6aaa439

  Copy full SHA for 6aaa439

Commits on Sep 7, 2023

• Merge PR SigmaHQ#4412 from @phantinuss

  Show description for 34de846
  phantinuss

  authored
  34de846

  Copy full SHA for 34de846

• Merge PR SigmaHQ#4425 from @kidrek - ESXi Syslog Configuration Change Via ESXCLI

  Show description for e738fff
  

  3 peopleauthored
  e738fff

  Copy full SHA for e738fff

• Merge PR SigmaHQ#4406 from @nasbench - Multiple Updates & Additions

  Show description for bdffe3a
  

  nasbench

  and

  phantinuss

  authored
  bdffe3a

  Copy full SHA for bdffe3a

Commits on Sep 6, 2023

• Merge PR SigmaHQ#4309 from @frack113 - New Rules & Update Related To Electron Apps Abuse

  Show description for ffcb585
  

  3 peopleauthored
  ffcb585

  Copy full SHA for ffcb585

• Merge PR SigmaHQ#4419 from @frack113 - New Rules Related To Zone.Identifier ADS Deletion

  Show description for 5884d9a
  

  3 peopleauthored
  5884d9a

  Copy full SHA for 5884d9a

• Merge PR SigmaHQ#4424 from @kidrek - Account Creation Via ESXCLI

  Show description for b177b1e
  

  4 peopleauthored
  b177b1e

  Copy full SHA for b177b1e

• Merge PR SigmaHQ#4396 from @kidrek - Add New Rules Related To ESXCLI Usage

  Show description for 359292e
  

  4 peopleauthored
  359292e

  Copy full SHA for 359292e

• Merge PR SigmaHQ#4417 from @ThureinOo - Update SQL injections

  Show description for 1e7a5b0
  

  ThureinOo

  and

  nasbench

  authored
  1e7a5b0

  Copy full SHA for 1e7a5b0

• Merge PR SigmaHQ#4423 from @MarkMorow - Add Azure AD Identity Protection Rules

  Show description for efe2c9b
  

  4 peopleauthored
  efe2c9b

  Copy full SHA for efe2c9b

Commits on Sep 1, 2023

• Merge PR SigmaHQ#4418 from @securepeacock - Fix typo in title

  Show description for 9cb124f
  

  securepeacock

  and

  nasbench

  authored
  9cb124f

  Copy full SHA for 9cb124f

• Merge PR SigmaHQ#4416 from @ThureinOo - Increase SQL Injection Coverage

  Show description for d43c500
  

  3 peopleauthored
  d43c500

  Copy full SHA for d43c500

• Merge PR SigmaHQ#4414 from @Neo23x0 - Add new qakbot hashes

  Show description for 64e524f
  

  Neo23x0

  and

  nasbench

  authored
  64e524f

  Copy full SHA for 64e524f

• Merge PR SigmaHQ#4409 from @ThureinOo - Increase Coverage Of Path Traversal Exploitation Rule

  Show description for 421bbed
  

  3 peopleauthored
  421bbed

  Copy full SHA for 421bbed

Commits on Aug 31, 2023

• Merge PR SigmaHQ#4408 from @Neo23x0 - Add New Qakbot Rule

  Show description for e11ad35
  

  Neo23x0

  and

  nasbench

  authored
  e11ad35

  Copy full SHA for e11ad35

Commits on Aug 30, 2023

• Merge pull request SigmaHQ#4403 from tropChaud/patch-5

  Show description for 082c371
  frack113

  authored
  082c371

  Copy full SHA for 082c371

Commits on Aug 29, 2023

• Update proc_creation_win_cmd_mklink_osk_cmd.yml

  Show description for 8efc81a
  tropChaud

  authored
  8efc81a

  Copy full SHA for 8efc81a

Commits on Aug 28, 2023

• Merge PR SigmaHQ#4392 from @tjgeorgen - Update MITRE Tags

  Show description for 60b8e9b
  

  tjgeorgen

  and

  nasbench

  authored
  60b8e9b

  Copy full SHA for 60b8e9b

• Merge PR SigmaHQ#4397 from @veramine - Update Process Terminated Via Taskkill

  Show description for 0d307c6
  

  3 peopleauthored
  0d307c6

  Copy full SHA for 0d307c6

• Merge PR SigmaHQ#4400 from @phantinuss - FP with visio.exe

  Show description for 3dd9177
  phantinuss

  authored
  3dd9177

  Copy full SHA for 3dd9177

Commits on Aug 25, 2023

• Merge PR SigmaHQ#4393 from @phantinuss - use explicit CIDR notation for loopback

  Show description for 188236a
  phantinuss

  authored
  188236a

  Copy full SHA for 188236a

Commits on Aug 24, 2023

• Merge PR SigmaHQ#4391 from @phantinuss - remove listing from changelog in PR template

  Show description for af05a5b
  phantinuss

  authored
  af05a5b

  Copy full SHA for af05a5b

• Merge PR SigmaHQ#4380 from @SethHanford - Lnx container discovery

  Show description for df4fa62
  

  4 peopleauthored
  df4fa62

  Copy full SHA for df4fa62

• Merge pull request SigmaHQ#4390 from @nasbench - CVE-2023-36874

  Show description for 67d1036
  

  nasbench

  and

  phantinuss

  authored
  67d1036

  Copy full SHA for 67d1036

• Merge pull request SigmaHQ#4294 from @danielbohannon - Permiso p0-LUCR-1 (aka GUI-vil)

  Show description for 3ce631a
  

  3 peopleauthored
  3ce631a

  Copy full SHA for 3ce631a

Commits on Aug 23, 2023

• Merge pull request SigmaHQ#4389 from @securepeacock

  Show description for 291ca18
  securepeacock

  authored
  291ca18

  Copy full SHA for 291ca18

• Merge pull request SigmaHQ#4388 from @securepeacock

  Show description for bad3152
  securepeacock

  authored
  bad3152

  Copy full SHA for bad3152

• Merge pull request SigmaHQ#4384 from @gleeiamglo

  Show description for 832c15a
  

  3 peopleauthored
  832c15a

  Copy full SHA for 832c15a

• Merge pull request SigmaHQ#4325 from @mtnmunuklu

  Show description for 0964033
  

  3 peopleauthored
  0964033

  Copy full SHA for 0964033

• chore: update PULL_REQUEST_TEMPLATE.md - add changelog instead of detailed description (SigmaHQ#4386)

  phantinuss

  authored
  fdc5b6a

  Copy full SHA for fdc5b6a

• Merge pull request SigmaHQ#4385 from @phantinuss - Update Workflow Pipeline

  Show description for da8d42f
  phantinuss

  authored
  da8d42f

  Copy full SHA for da8d42f

• Merge pull request SigmaHQ#4155 from D4rkCiph3r/patch-5

  Show description for 2a2db29
  phantinuss

  authored
  2a2db29

  Copy full SHA for 2a2db29

• Merge pull request SigmaHQ#4127 from D4rkCiph3r/in-memory-payload

  Show description for ea5db35
  phantinuss

  authored
  ea5db35

  Copy full SHA for ea5db35

Pagination

Previous

Next