Commits

Branch selector

 master

User selector

All users

Datepicker

All time

Commit History

Commits on Sep 2, 2024

• Merge PR SigmaHQ#4992 from @nasbench - Archive new rule references and update cache file

  Show description for 9eb4dea
  

  github-actions[bot]

  and

  nasbench

  authored
  9eb4dea

  Copy full SHA for 9eb4dea

Commits on Aug 29, 2024

• Merge PR SigmaHQ#4986 from @djlukic - Multiple FP fixes

  Show description for 509120a
  

  djlukic

  and

  nasbench

  authored
  509120a

  Copy full SHA for 509120a

• Merge PR SigmaHQ#4987 from @peterydzynski - Fix System Network Discovery - macOS

  Show description for 9c7b8bc
  

  peterydzynski

  and

  nasbench

  authored
  9c7b8bc

  Copy full SHA for 9c7b8bc

• Merge PR SigmaHQ#4961 from @tsale - Add multiples rules and updates

  Show description for 2851ef5
  

  tsale

  and

  nasbench

  authored
  2851ef5

  Copy full SHA for 2851ef5

• Merge PR SigmaHQ#4937 from @nasbench - Multiple updates and fixes

  Show description for 4cd51a3
  nasbench

  authored
  4cd51a3

  Copy full SHA for 4cd51a3

Commits on Aug 27, 2024

• Merge PR SigmaHQ#4985 from @secDre4mer - Update Potential Active Directory Reconnaissance/Enumeration Via LDAP

  Show description for 5550ccd
  secDre4mer

  authored
  5550ccd

  Copy full SHA for 5550ccd

Commits on Aug 26, 2024

• Merge PR SigmaHQ#4982 from @X-Junior - Update scheduled task related rules

  Show description for 5c4f599
  

  X-Junior

  and

  nasbench

  authored
  5c4f599

  Copy full SHA for 5c4f599

Commits on Aug 23, 2024

• Merge PR SigmaHQ#4947 from @omaramin17 - Add DNS Query To Put.io - DNS Client

  Show description for 29dce31
  

  omaramin17

  and

  nasbench

  authored
  29dce31

  Copy full SHA for 29dce31

• Merge PR SigmaHQ#4954 from @omaramin17 - Update multiple rules with additional sharing domains

  Show description for 9b3c363
  

  omaramin17

  and

  nasbench

  authored
  9b3c363

  Copy full SHA for 9b3c363

Commits on Aug 22, 2024

• Merge PR SigmaHQ#4969 from @Mahir-Ali-khan - Add Potential File Override/Append Via SET Command

  Show description for 17d1977
  

  Mahir-Ali-khan

  and

  nasbench

  authored
  17d1977

  Copy full SHA for 17d1977

Commits on Aug 21, 2024

• Merge PR SigmaHQ#4965 from @omaramin17 - Add Driver Added To Disallowed Images In HVCI - Registry

  Show description for b1a2d41
  

  omaramin17

  and

  nasbench

  authored
  b1a2d41

  Copy full SHA for b1a2d41

• Merge PR SigmaHQ#4951 from @omaramin17 - Add Hidden Flag Set On File/Directory Via Chflags - MacOS

  Show description for a21ab67
  

  omaramin17

  and

  nasbench

  authored
  a21ab67

  Copy full SHA for a21ab67

• Merge PR SigmaHQ#4977 from @cyb3rjy0t - Add User Risk and MFA Registration Policy Updated

  Show description for 78abfd5
  

  cyb3rjy0t

  and

  nasbench

  authored
  78abfd5

  Copy full SHA for 78abfd5

• Merge PR SigmaHQ#4978 from @cyb3rjy0t - Add Multi Factor Authentication Disabled For User Account

  Show description for d114395
  

  cyb3rjy0t

  and

  nasbench

  authored
  d114395

  Copy full SHA for d114395

Commits on Aug 20, 2024

• Merge PR SigmaHQ#4948 from @omaramin17 - Add Data Export From MSSQL Table Via BCP.EXE

  Show description for 0504f18
  

  omaramin17

  and

  nasbench

  authored
  0504f18

  Copy full SHA for 0504f18

Commits on Aug 16, 2024

• Merge PR SigmaHQ#4974 from @tsale - Add Potentially Suspicious Rundll32.EXE Execution of UDL File

  Show description for 7e93682
  

  tsale

  and

  nasbench

  authored
  7e93682

  Copy full SHA for 7e93682

• Merge PR SigmaHQ#4973 from @frack113 - Fix date format for some rules along with a broken logsource field

  Show description for adff65f
  frack113

  authored
  adff65f

  Copy full SHA for adff65f

Commits on Aug 15, 2024

• Merge PR SigmaHQ#4970 from @nasbench - Archive new rule references and update cache file

  Show description for 8bf0ef1
  

  github-actions[bot]

  and

  nasbench

  authored
  8bf0ef1

  Copy full SHA for 8bf0ef1

Commits on Aug 13, 2024

• Merge PR SigmaHQ#4967 from @nasbench - Revert accidental change introduced in SigmaHQ#4950

  Show description for 6901221
  nasbench

  authored
  6901221

  Copy full SHA for 6901221

Commits on Aug 12, 2024

• Merge PR SigmaHQ#4923 from frack113 - Update test_rules.py to remove the tests covered by pySigma-validators-sigmahq v0.7.0

  Show description for 760597d
  frack113

  authored
  760597d

  Copy full SHA for 760597d

• Merge PR SigmaHQ#4956 from @frack113 - Update promote_rules_status script to use the native datetime.date

  Show description for 4c01702
  frack113

  authored
  4c01702

  Copy full SHA for 4c01702

• Merge PR SigmaHQ#4950 from @nasbench - Comply With v2 Spec Changes

  Show description for 598d29f
  nasbench

  authored
  598d29f

  Copy full SHA for 598d29f

Commits on Aug 11, 2024

• Merge PR SigmaHQ#4964 from @fukusuket - Fix rules to not use Lookahead regex

  Show description for c8a3761
  

  fukusuket

  and

  nasbench

  authored
  c8a3761

  Copy full SHA for c8a3761

Commits on Aug 10, 2024

• Merge PR SigmaHQ#4963 from @nasbench - Fix Startup Item File Created - MacOS

  Show description for 1180176
  nasbench

  authored
  1180176

  Copy full SHA for 1180176

• Merge PR SigmaHQ#4949 from @omaramin17 - Add new rules related to Hdiutil usage

  Show description for bfc5586
  

  omaramin17

  and

  nasbench

  authored
  bfc5586

  Copy full SHA for bfc5586

• Merge PR SigmaHQ#4957 from @peterydzynski - Update regex for Powershell Token Obfuscation rules

  Show description for ace902b
  peterydzynski

  authored
  ace902b

  Copy full SHA for ace902b

• Merge PR SigmaHQ#4960 from @fukusuket - Update unreachable/broken references

  Show description for dbba992
  fukusuket

  authored
  dbba992

  Copy full SHA for dbba992

• Merge PR SigmaHQ#4959 from @frack113 - Freeze pySigma to 0.11.9 before migration to v2

  Show description for 51d0119
  frack113

  authored
  51d0119

  Copy full SHA for 51d0119

Commits on Aug 9, 2024

• Merge PR SigmaHQ#4958 from @fukusuket - Update unreachable/broken references

  Show description for 8ff9cd8
  

  fukusuket

  and

  nasbench

  authored
  8ff9cd8

  Copy full SHA for 8ff9cd8

Commits on Aug 7, 2024

• Merge PR SigmaHQ#4955 from @joshnck - Fix agentexecutor.exe related rules

  Show description for 8254c4f
  

  joshnck

  and

  nasbench

  authored
  8254c4f

  Copy full SHA for 8254c4f

• Merge PR SigmaHQ#4941 from @dbertho - Update Outlook Persistence related rules / Specula

  Show description for a47edba
  

  dbertho

  and

  nasbench

  authored
  a47edba

  Copy full SHA for a47edba

• Merge PR SigmaHQ#4946 from @swachchhanda000 - Add Suspicious Process Masquerading As SvcHost.EXE

  Show description for 4989d43
  

  swachchhanda000

  and

  nasbench

  authored
  4989d43

  Copy full SHA for 4989d43

• Merge PR SigmaHQ#4952 from @joshnck - Fix Potential DLL Sideloading Of DbgModel.DLL

  Show description for 22f0295
  

  joshnck

  and

  nasbench

  authored
  22f0295

  Copy full SHA for 22f0295

Commits on Aug 1, 2024

• Merge PR SigmaHQ#4945 from @GtUGtHGtNDtEUaE - Fix typo in field name for rules leveraging EID 5145

  Show description for 782f0f5
  GtUGtHGtNDtEUaE

  authored
  782f0f5

  Copy full SHA for 782f0f5

• Merge PR SigmaHQ#4944 from @YamatoSecurity - Add missing expand modifier

  Show description for c5e352c
  YamatoSecurity

  authored
  c5e352c

  Copy full SHA for c5e352c

Pagination

Previous

Next