Commits

Breadcrumbs

History for

onccfa774

User selector

All users

Datepicker

All time

Commit History

Commits on Apr 26, 2022

• some fixes and refactoring

  Neo23x0

  committed
  f0253eb

  Copy full SHA for f0253eb

Commits on Mar 21, 2022

• fix: Service Installation 7045 field confusion

  Neo23x0

  committed
  ce4cdf0

  Copy full SHA for ce4cdf0

Commits on Mar 16, 2022

• fix: remove penetration test as valid false positive reason

  phantinuss

  committed
  84d0c47

  Copy full SHA for 84d0c47

• fix: remove penetration testing as a valid false positive

  phantinuss

  committed
  4585133

  Copy full SHA for 4585133

• fix: unknown --> Unknown

  phantinuss

  committed
  b23eee6

  Copy full SHA for b23eee6

Commits on Mar 8, 2022

• Refactor regex

  frack113

  committed
  5938569

  Copy full SHA for 5938569

Commits on Dec 2, 2021

• feat: discourage the usage of 'all of them' and migrate existing rules to use the preferred method 'all of selection*'

  phantinuss

  committed
  07a0a37

  Copy full SHA for 07a0a37

Commits on Nov 27, 2021

• docs: changed wording in rule descriptions

  Neo23x0

  committed
  91c83bb

  Copy full SHA for 91c83bb

Commits on Nov 14, 2021

• No filetype or bodyMagic in zeek http log field

  frack113

  committed
  5245360

  Copy full SHA for 5245360

Commits on Nov 11, 2021

• Fix auditd field name

  frack113

  committed
  bd3358d

  Copy full SHA for bd3358d

Commits on Nov 10, 2021

• Integrity do not exist in file_event

  frack113

  committed
  f01523d

  Copy full SHA for f01523d

• FileMagicBytes do not exist in file_event

  frack113

  committed
  b6f6bed

  Copy full SHA for b6f6bed

• ParentImage do not exist in network_connection

  frack113

  committed
  3ea1eda

  Copy full SHA for 3ea1eda

Commits on Oct 29, 2021

• change to unsupported status

  frack113

  committed
  b2d66c4

  Copy full SHA for b2d66c4

Commits on Sep 26, 2021

• refactor: moved last global rule to unsupported

  Neo23x0

  committed
  f196e31

  Copy full SHA for f196e31

Commits on Sep 21, 2021

• split global win_mal_service_installs.yml

  frack113

  committed
  dde3b17

  Copy full SHA for dde3b17

• split global win_metasploit_or_impacket_smb_psexec_service_install.yml

  frack113

  committed
  b9d14ef

  Copy full SHA for b9d14ef

• split clobal win_tap_driver_installation.yml

  frack113

  committed
  06ed7c4

  Copy full SHA for 06ed7c4

Commits on Sep 20, 2021

• split global win_invoke_obfuscation_*

  frack113

  committed
  79d22dd

  Copy full SHA for 79d22dd

• split global win_invoke_obfuscation_*

  frack113

  committed
  b6dc4de

  Copy full SHA for b6dc4de

Commits on Jul 27, 2021

• Add yamllint to GHA

  Show description for d2592ee
  gliptak

  committed
  d2592ee

  Copy full SHA for d2592ee

Commits on Jul 9, 2021

• 2 more rule with custom field

  frack113

  committed
  a53e21e

  Copy full SHA for a53e21e

• Move to rules-unsupported as use special enrichment field

  frack113

  committed
  06a05cf

  Copy full SHA for 06a05cf

Commits on Jan 5, 2021

• Merge pull request SigmaHQ#1041 from ryanplasma/rplas-SIGMA-547-page-13

  Show description for 738bb4a
  yugoslavskiy

  authored
  738bb4a

  Copy full SHA for 738bb4a

Commits on Oct 17, 2020

• Replace start of paths with placeholders

  ryanplasma

  committed
  ff84852

  Copy full SHA for ff84852

Commits on Oct 16, 2020

• Merge pull request SigmaHQ#1195 from tas-kmanager/mt-oscd-sigma547-48

  Show description for cc2f48b
  yugoslavskiy

  authored
  cc2f48b

  Copy full SHA for cc2f48b

• [OSCD] Always Install Elevated

  Show description for 65c2e5d
  tas-kmanager

  committed
  65c2e5d

  Copy full SHA for 65c2e5d

Commits on Oct 11, 2020

• Merge pull request SigmaHQ#1033 from JPMinty/oscd

  Show description for 0966d24
  yugoslavskiy

  authored
  0966d24

  Copy full SHA for 0966d24

• Added selection criteria + moved to Unsupported rule

  

  JPMinty

  committed
  21284c2

  Copy full SHA for 21284c2

• Added conditional description + moved to unsupported-rules

  

  JPMinty

  committed
  10f5c38

  Copy full SHA for 10f5c38

Commits on Jun 3, 2020

• All Rules use 'TargetFilename' instead of 'TargetFileName'.

  Show description for 4ed5120
  svnscha

  committed
  4ed5120

  Copy full SHA for 4ed5120

Commits on Dec 19, 2019

• UUIDs + moved unsupported logic

  Show description for 924e1fe
  thomaspatzke

  committed
  924e1fe

  Copy full SHA for 924e1fe

Loading