Commits

Branch selector

 master

User selector

secDre4mer

Datepicker

All time

Commit History

Commits on Mar 29, 2022

• fix: filter null image in process creation rule

  secDre4mer

  committed
  36ba148

  Copy full SHA for 36ba148

Commits on Mar 15, 2022

• feat: Add log sources for process listing within THOR

  secDre4mer

  committed
  1044a20

  Copy full SHA for 1044a20

Commits on Jan 25, 2022

• chore: update modified date

  secDre4mer

  committed
  51d9aca

  Copy full SHA for 51d9aca

• fix: Add filter for empty image to rule

  secDre4mer

  committed
  0cad38b

  Copy full SHA for 0cad38b

Commits on Dec 14, 2021

• fix: correct FP filter

  secDre4mer

  committed
  7fea250

  Copy full SHA for 7fea250

Commits on Dec 13, 2021

• feat: Add finer powershell log source distinguation

  Show description for b4553dc
  secDre4mer

  committed
  b4553dc

  Copy full SHA for b4553dc

Commits on Dec 9, 2021

• fix: inline list with one argument

  secDre4mer

  committed
  3c699a2

  Copy full SHA for 3c699a2

• feat: Add rules to detect uncommon process creation events

  secDre4mer

  committed
  ca2ead7

  Copy full SHA for ca2ead7

• fix: mark string as regex

  secDre4mer

  committed
  538fb06

  Copy full SHA for 538fb06

Commits on Sep 21, 2021

• chore: properly name and describe rules

  secDre4mer

  committed
  bf9bc03

  Copy full SHA for bf9bc03

• feat: Add rule for live memory dumping

  secDre4mer

  committed
  8c3faa3

  Copy full SHA for 8c3faa3

• feat: Add rule for syslog removal

  secDre4mer

  committed
  346ff26

  Copy full SHA for 346ff26

Commits on Aug 23, 2021

• feat: Add rule for malicious CSR export on Exchange

  secDre4mer

  committed
  82dde59

  Copy full SHA for 82dde59

Commits on Aug 16, 2021

• fix: Clean up duplicated ID

  secDre4mer

  committed
  78e2c0d

  Copy full SHA for 78e2c0d

• feat: Add some rules to detect Conti behaviour

  Show description for 5b60e0e
  secDre4mer

  committed
  5b60e0e

  Copy full SHA for 5b60e0e

• fix: Remove powershell_alternate_hosts from PR

  Show description for d2a35ed
  secDre4mer

  committed
  d2a35ed

  Copy full SHA for d2a35ed

Commits on Aug 13, 2021

• fix: Correct broken rules, add documentation

  secDre4mer

  committed
  ce326cb

  Copy full SHA for ce326cb

• fix: Rewrite another message rule

  Show description for e1ef8f4
  secDre4mer

  committed
  e1ef8f4

  Copy full SHA for e1ef8f4

Commits on Aug 12, 2021

• fix: Correct incorrect message / keyword usage

  Show description for 6f05e33
  secDre4mer

  committed
  6f05e33

  Copy full SHA for 6f05e33

Commits on Apr 28, 2021

• chore: Revert log file changes for THOR sigma configuration

  Show description for 7c8cca7
  secDre4mer

  committed
  7c8cca7

  Copy full SHA for 7c8cca7

• fix: Distinguish Windows and Linux logfiles by path separator

  Show description for de2cedf
  secDre4mer

  committed
  de2cedf

  Copy full SHA for de2cedf