Commits

Branch selector

 master

User selector

frack113

Datepicker

All time

Commit History

Commits on Oct 6, 2024

• Merge PR SigmaHQ#4935 from @frack113 - Add new IIS logsource and related rules

  Show description for c70fff4
  

  frack113

  and

  nasbench

  authored
  c70fff4

Commits on Sep 13, 2024

• Merge PR SigmaHQ#5006 from @frack113 - Fix UNC2452 Process Creation Patterns

  Show description for 236db73
  frack113

  authored
  236db73

Commits on Aug 16, 2024

• Merge PR SigmaHQ#4973 from @frack113 - Fix date format for some rules along with a broken logsource field

  Show description for adff65f
  frack113

  authored
  adff65f

Commits on Aug 12, 2024

• Merge PR SigmaHQ#4923 from frack113 - Update test_rules.py to remove the tests covered by pySigma-validators-sigmahq v0.7.0

  Show description for 760597d
  frack113

  authored
  760597d

• Merge PR SigmaHQ#4956 from @frack113 - Update promote_rules_status script to use the native datetime.date

  Show description for 4c01702
  frack113

  authored
  4c01702

Commits on Aug 10, 2024

• Merge PR SigmaHQ#4959 from @frack113 - Freeze pySigma to 0.11.9 before migration to v2

  Show description for 51d0119
  frack113

  authored
  51d0119

Commits on Jul 30, 2024

• Merge PR SigmaHQ#4938 from @frack113 - Add CVE-2024-37085 detection rules

  Show description for b723173
  

  frack113

  and

  nasbench

  authored
  b723173

Commits on Jul 17, 2024

• Merge PR SigmaHQ#4916 from @frack113 - Move some rules to Emerging-Threats folder

  Show description for 3c7fcf6
  frack113

  authored
  3c7fcf6

Commits on May 27, 2024

• Merge PR SigmaHQ#4862 from @frack113 - Add Uncommon Process Access Rights For Target Image

  Show description for 1c1081d
  

  frack113

  and

  nasbench

  authored
  1c1081d

Commits on May 13, 2024

• Merge PR SigmaHQ#4852 from @frack113 - Add Potential Packet Capture Activity Via Start-NetEventSession - ScriptBlock

  Show description for fb3a72b
  

  frack113

  and

  nasbench

  authored
  fb3a72b

• Merge PR SigmaHQ#4850 from @frack113 - Cleanup rule conditions to align with standard

  Show description for 7d6f32d
  

  frack113

  and

  nasbench

  authored
  7d6f32d

• Merge PR SigmaHQ#4830 from @frack113 - Enhance Wbadmin based rules

  Show description for aaf51bf
  

  frack113

  and

  nasbench

  authored
  aaf51bf

• Merge PR SigmaHQ#4851 from @frack113 - Fix typo in modifier usage

  Show description for 9341930
  frack113

  authored
  9341930

Commits on May 10, 2024

• Merge PR SigmaHQ#4838 from @frack113 - Add Access To Windows Outlook Mail Files By Uncommon Application

  Show description for fe26ffa
  

  frack113

  and

  nasbench

  authored
  fe26ffa

• Merge PR SigmaHQ#4843 from @frack113 - Add New-NetFirewallRule usage related rules

  Show description for 392e3a3
  

  frack113

  and

  nasbench

  authored
  392e3a3

• Merge PR SigmaHQ#4844 from @frack113 - Update UAC based rules

  Show description for 7cdcb76
  

  frack113

  and

  nasbench

  authored
  7cdcb76

• Merge PR SigmaHQ#4847 from @frack113 - Update test Workflow to use pySigma-validators-sigmahq

  Show description for 2cfa9a2
  frack113

  authored
  2cfa9a2

Commits on Apr 25, 2024

• Merge PR SigmaHQ#4829 from @frack113 - Add Network Connection Initiated By RegAsm.EXE

  Show description for 22b3416
  

  3 peopleauthored
  22b3416

Commits on Apr 15, 2024

• Merge PR SigmaHQ#4803 from @frack113 - Update regex based rules

  Show description for 045a9a5
  

  3 peopleauthored
  045a9a5

• Merge PR SigmaHQ#4808 from @frack113 - FP Bad practice GPO

  Show description for 691dca6
  

  frack113

  and

  nasbench

  authored
  691dca6

• Merge PR SigmaHQ#4813 from @frack113 - Add Image to avoid FP

  Show description for 8687ba8
  

  frack113

  and

  nasbench

  authored
  8687ba8

• Merge PR SigmaHQ#4807 from @frack113 - Update ATT&CK tags

  Show description for c21a4e1
  frack113

  authored
  c21a4e1

Commits on Mar 18, 2024

• Merge PR SigmaHQ#4771 from @frack113 - Fix false positive found in testing

  Show description for b24da5c
  

  3 peopleauthored
  b24da5c

Commits on Mar 15, 2024

• Merge PR SigmaHQ#4767 from @frack113 - Update additional rules to use the windash modifier

  Show description for 33bed27
  frack113

  authored
  33bed27

Commits on Mar 14, 2024

• Merge PR SigmaHQ#4768 from @frack113 - Update workflows action version

  Show description for 583f08e
  frack113

  authored
  583f08e

Commits on Mar 13, 2024

• Merge PR SigmaHQ#4765 from @frack113 - Update additional rules to use the cidr modifier

  Show description for 6abf058
  

  frack113

  and

  nasbench

  authored
  6abf058

Commits on Mar 11, 2024

• Merge PR SigmaHQ#4752 from @frack113 - Update rules to use the windash modifier

  Show description for 48baf11
  

  frack113

  and

  nasbench

  authored
  48baf11

Commits on Feb 26, 2024

• Merge PR SigmaHQ#4727 from @frack113 - Refactor the condition field to align with the standard

  Show description for 49bd839
  

  frack113

  and

  nasbench

  authored
  49bd839

Commits on Jan 30, 2024

• Merge PR SigmaHQ#4697 from @frack113 - Fix errors in rule status and logsource

  Show description for ebaa1ab
  frack113

  authored
  ebaa1ab

Commits on Jan 26, 2024

• Merge PR SigmaHQ#4656 from @frack113 - Upgrade rule promotion script to use pySigma

  Show description for a158d89
  frack113

  authored
  a158d89

Commits on Jan 12, 2024

• Merge PR SigmaHQ#4530 from @frack113 - Pingcastle PUA

  Show description for a2f8a82
  

  3 peopleauthored
  a2f8a82

Commits on Dec 21, 2023

• Merge PR SigmaHQ#4536 from @frack113 - Add New Rules Related To Sysvol Access

  Show description for 2cb6ccd
  

  frack113

  and

  nasbench

  authored
  2cb6ccd

Commits on Dec 1, 2023

• Merge PR SigmaHQ#4609 from @frack113 - Add More PySigma Validators

  Show description for 3990060
  frack113

  authored
  3990060

Commits on Nov 27, 2023

• Merge PR SigmaHQ#4591 from @frack113 - Update tests to pySigma 0.10.9

  Show description for 56ac238
  

  frack113

  and

  nasbench

  authored
  56ac238

Commits on Nov 17, 2023

• Merge PR SigmaHQ#4574 from @frack113 - ci: 🤖 add new sigma-cli 0.7.10 validators

  Show description for 2d63859
  

  frack113

  and

  nasbench

  authored
  2d63859

Pagination

PreviousNext