Commits

Branch selector

 master

User selector

ruppde

Datepicker

All time

Commit History

Commits on Oct 8, 2024

• Merge PR SigmaHQ#5040 from @ruppde - Update Antivirus Password Dumper Detection

  Show description for 7ddc551
  ruppde

  authored
  7ddc551

  Copy full SHA for 7ddc551

Commits on Sep 22, 2024

• Merge PR SigmaHQ#5013 from @ruppde - Update linux scanning rules

  Show description for 35a5eb9
  ruppde

  authored
  35a5eb9

  Copy full SHA for 35a5eb9

Commits on Jul 3, 2024

• Merge PR SigmaHQ#4898 from @ruppde - Fix Potential Exploitation of CVE-2024-3094 - Suspicious SSH Child Process

  Show description for 0511e57
  

  ruppde

  and

  nasbench

  authored
  0511e57

  Copy full SHA for 0511e57

Commits on Jun 5, 2024

• Merge PR SigmaHQ#4873 from @ruppde - Add the string "mikatz" to relevant rules

  Show description for 0ccbda7
  

  ruppde

  and

  nasbench

  authored
  0ccbda7

  Copy full SHA for 0ccbda7

Commits on Apr 12, 2024

• Update proc_creation_lnx_exploit_cve_2024_3094_sshd_child_process.yml

  Show description for 146c91c
  ruppde

  committed
  146c91c

  Copy full SHA for 146c91c

Commits on Apr 2, 2024

• Merge PR SigmaHQ#4794 from @ruppde - Potential Exploitation of CVE-2024-3094

  Show description for 71ae004
  

  3 peopleauthored
  71ae004

  Copy full SHA for 71ae004

Commits on Dec 18, 2023

• Merge PR SigmaHQ#4618 from @ruppde - Filter out Webex binary

  Show description for d652a9e
  ruppde

  authored
  d652a9e

  Copy full SHA for d652a9e

Commits on Mar 30, 2023

• feat: add new domain to rules related to 3CX compromise (SigmaHQ#4154)

  ruppde

  authored
  b2e9b47

  Copy full SHA for b2e9b47

Commits on Jan 16, 2023

• Merge branch 'SigmaHQ:master' into master

  ruppde

  authored
  5059616

  Copy full SHA for 5059616

• add -i to grep parameters to make it case insensitive as sigma

  ruppde

  authored
  ffa01ef

  Copy full SHA for ffa01ef

Commits on Jan 13, 2023

• fix2

  ruppde

  authored
  d0443c3

  Copy full SHA for d0443c3

• fix falsepositives

  ruppde

  authored
  92b0ce1

  Copy full SHA for 92b0ce1

• Fix rule using list with only 1 element

  ruppde

  authored
  f58358b

  Copy full SHA for f58358b

• several improvements in rules/category/antivirus/*

  ruppde

  committed
  d0234a7

  Copy full SHA for d0234a7

Commits on Jan 12, 2023

• Add more ransomware strings

  ruppde

  authored
  9868c00

  Copy full SHA for 9868c00

• small fix for MS defender, uses e.g. Trojan:PHP/...

  ruppde

  authored
  15e7271

  Copy full SHA for 15e7271

Commits on Feb 3, 2022

• Update win_av_relevant_match.yml

  Show description for aab0090
  ruppde

  committed
  aab0090

  Copy full SHA for aab0090

Commits on May 8, 2021

• Update av_relevant_files.yml

  Show description for b9fc257
  ruppde

  committed
  b9fc257

  Copy full SHA for b9fc257

• Update av_webshell.yml

  Show description for ad3b829
  ruppde

  committed
  ad3b829

  Copy full SHA for ad3b829

Commits on Jan 11, 2021

• Update win_webshell_detection.yml

  ruppde

  committed
  b2860b8

  Copy full SHA for b2860b8

• Add xHunt Campaign: BumbleBee Webshell

  Show description for 5d80d63
  ruppde

  committed
  5d80d63

  Copy full SHA for 5d80d63

Commits on Jan 7, 2021

• more AV event and suspicious commands

  Show description for d5de3fe
  ruppde

  committed
  d5de3fe

  Copy full SHA for d5de3fe

Commits on Jan 24, 2020

• complete_cve_2019-19781

  

  ruppde

  authored and

  Florian Roth

  committed
  bace799

  Copy full SHA for bace799

• add newbm.pl

  

  ruppde

  authored and

  Florian Roth

  committed
  341ed34

  Copy full SHA for 341ed34

• add rule for Citrix Netscaler CVE-2019-19781

  

  ruppde

  authored and

  Florian Roth

  committed
  d0230f0

  Copy full SHA for d0230f0

• add rule for Citrix Netscaler CVE-2019-19781

  

  ruppde

  authored and

  Florian Roth

  committed
  0bde8b5

  Copy full SHA for 0bde8b5

Commits on Jan 15, 2020

• complete_cve_2019-19781

  ruppde

  committed
  e35ebcc

  Copy full SHA for e35ebcc

Commits on Jan 11, 2020

• add newbm.pl

  ruppde

  committed
  364e859

  Copy full SHA for 364e859

Commits on Jan 3, 2020

• add rule for Citrix Netscaler CVE-2019-19781

  ruppde

  committed
  35fbdd1

  Copy full SHA for 35fbdd1

Commits on Jan 2, 2020

• add rule for Citrix Netscaler CVE-2019-19781

  ruppde

  committed
  b98e576

  Copy full SHA for b98e576

Commits on Oct 14, 2019

• remove .exe from lsass

  ruppde

  committed
  cf5d7f1

  Copy full SHA for cf5d7f1