Commits

Branch selector

 master

User selector

All users

Datepicker

All time

Commit History

Commits on Nov 4, 2024

• Merge PR SigmaHQ#5042 from @wieso-itzi - Update Python PTY rules

  Show description for 4f4ef7a
  

  wieso-itzi

  and

  nasbench

  authored
  4f4ef7a

  Copy full SHA for 4f4ef7a

• Merge PR SigmaHQ#5068 from @ruppde - Update rules in the Antivirus category with additional strings and signature names

  Show description for 243003c
  

  ruppde

  and

  nasbench

  authored
  243003c

  Copy full SHA for 243003c

• Merge PR SigmaHQ#5064 from @Koifman - Add missing ATT&CK tag to Monero Crypto Coin Mining Pool Lookup

  Show description for cfa6d8a
  Koifman

  authored
  cfa6d8a

  Copy full SHA for cfa6d8a

• Merge PR SigmaHQ#5070 from @Neo23x0 - Update .RDP File Created by Outlook Process

  Show description for fe999a5
  

  Neo23x0

  and

  nasbench

  authored
  fe999a5

  Copy full SHA for fe999a5

Commits on Nov 1, 2024

• Merge PR SigmaHQ#5067 from @nasbench - Add missing reference links

  Show description for e1787da
  nasbench

  authored
  e1787da

  Copy full SHA for e1787da

• Merge PR SigmaHQ#5058 from @ahmedfarou22 - Add new rules related to command execution via run dialogue

  Show description for 14ce104
  

  ahmedfarou22

  and

  nasbench

  authored
  14ce104

  Copy full SHA for 14ce104

• Merge PR SigmaHQ#5051 from @nasbench - Archive new rule references and update cache file

  Show description for 04df2e4
  

  github-actions[bot]

  and

  nasbench

  authored
  04df2e4

  Copy full SHA for 04df2e4

• Merge PR SigmaHQ#5063 from @Neo23x0 - Add & Update rules related to the suspicious creation of ".rdp" files

  Show description for 0cb8d0e
  

  Neo23x0

  and

  nasbench

  authored
  0cb8d0e

  Copy full SHA for 0cb8d0e

• Merge PR SigmaHQ#5065 from @nasbench - Promote older rules status from experimental to test

  Show description for f533350
  

  github-actions[bot]

  and

  nasbench

  authored
  f533350

  Copy full SHA for f533350

• Merge PR SigmaHQ#5052 from @dan21san - Update Potential Data Exfiltration Over SMTP Via Send-MailMessage Cmdlet

  Show description for 05a4963
  

  3 peopleauthored
  05a4963

  Copy full SHA for 05a4963

Commits on Oct 28, 2024

• Merge PR SigmaHQ#5057 from @Koifman - Add Access To Browser Credential Files By Uncommon Applications - Security

  Show description for 44176f0
  

  3 peopleauthored
  44176f0

  Copy full SHA for 44176f0

• Merge PR SigmaHQ#5060 from @MalGamy12 - Update Schedule Task Creation From Env Variable Or Potentially Suspicious Path Via Schtasks.EXE

  Show description for ad8ab49
  

  MalGamy12

  and

  nasbench

  authored
  ad8ab49

  Copy full SHA for ad8ab49

• Merge PR SigmaHQ#5062 from @defensivedepth - Update README.md

  Show description for f4e563a
  defensivedepth

  authored
  f4e563a

  Copy full SHA for f4e563a

Commits on Oct 25, 2024

• feat: update multiple rules (SigmaHQ#5055)

  Show description for 7e4748e
  

  X-Junior

  and

  nasbench

  authored
  7e4748e

  Copy full SHA for 7e4748e

Commits on Oct 8, 2024

• Merge PR SigmaHQ#4994 from @djlukic - Multiple FP fixes

  Show description for f33530e
  

  djlukic

  and

  nasbench

  authored
  f33530e

  Copy full SHA for f33530e

• Merge PR SigmaHQ#5040 from @ruppde - Update Antivirus Password Dumper Detection

  Show description for 7ddc551
  ruppde

  authored
  7ddc551

  Copy full SHA for 7ddc551

• Merge PR SigmaHQ#5008 from @BlackB0lt - Update HackTool - Certipy Execution

  Show description for 86989a0
  

  BlackB0lt

  and

  nasbench

  authored
  86989a0

  Copy full SHA for 86989a0

• Merge PR SigmaHQ#5036 from @dan21san - Update Alternate PowerShell Hosts Pipe

  Show description for b063a9d
  

  dan21san

  and

  nasbench

  authored
  b063a9d

  Copy full SHA for b063a9d

• Merge PR SigmaHQ#5039 from @CheraghiMilad - Update Local System Accounts Discovery - Linux

  Show description for d270dc5
  

  3 peopleauthored
  d270dc5

  Copy full SHA for d270dc5

• Merge PR SigmaHQ#5037 from @MalGamy12 - Update Disable Windows Defender Functionalities Via Registry Keys

  Show description for f472015
  

  MalGamy12

  and

  nasbench

  authored
  f472015

  Copy full SHA for f472015

• Merge PR SigmaHQ#5038 from @Neo23x0 - Update LSASS Process Memory Dump Files

  Show description for a997d62
  

  Neo23x0

  and

  nasbench

  authored
  a997d62

  Copy full SHA for a997d62

Commits on Oct 6, 2024

• Merge PR SigmaHQ#5012 from @ionsor - Update Potentially Suspicious JWT Token Search Via CLI

  Show description for 5b59c6d
  

  ionsor

  and

  nasbench

  authored
  5b59c6d

  Copy full SHA for 5b59c6d

• Merge PR SigmaHQ#5031 from @swachchhanda000 - Add Potential Python DLL SideLoading

  Show description for d1f1fc7
  

  3 peopleauthored
  d1f1fc7

  Copy full SHA for d1f1fc7

• Merge PR SigmaHQ#4935 from @frack113 - Add new IIS logsource and related rules

  Show description for c70fff4
  

  frack113

  and

  nasbench

  authored
  c70fff4

  Copy full SHA for c70fff4

• Merge PR SigmaHQ#5033 from @MalGamy12 - Update Process Terminated Via Taskkill

  Show description for 8a3f074
  

  MalGamy12

  and

  nasbench

  authored
  8a3f074

  Copy full SHA for 8a3f074

Commits on Oct 1, 2024

• Merge PR SigmaHQ#5026 from @X-Junior - Update COM Object Hijacking Via Modification Of Default System CLSID Default Value

  Show description for 1f1f31e
  

  X-Junior

  and

  nasbench

  authored
  1f1f31e

  Copy full SHA for 1f1f31e

• Merge PR SigmaHQ#5027 from @nasbench - Promote older rules status from experimental to test

  Show description for 08c52c3
  

  github-actions[bot]

  and

  nasbench

  authored
  08c52c3

  Copy full SHA for 08c52c3

• Merge PR SigmaHQ#5028 from @nasbench - Archive new rule references and update cache file

  Show description for 8ebc58c
  

  github-actions[bot]

  and

  nasbench

  authored
  8ebc58c

  Copy full SHA for 8ebc58c

Commits on Sep 22, 2024

• Merge PR SigmaHQ#5013 from @ruppde - Update linux scanning rules

  Show description for 35a5eb9
  ruppde

  authored
  35a5eb9

  Copy full SHA for 35a5eb9

• Merge PR SigmaHQ#5020 from @tsale - Add Remote Access Tool - MeshAgent Command Execution via MeshCentral

  Show description for 014d169
  

  3 peopleauthored
  014d169

  Copy full SHA for 014d169

• Merge PR SigmaHQ#5022 from @jaegeral - Fix some typos in rules metadata

  Show description for 9db7e07
  jaegeral

  authored
  9db7e07

  Copy full SHA for 9db7e07

Commits on Sep 18, 2024

• Merge PR SigmaHQ#5009 from @nasbench - Archive new rule references and update cache file

  Show description for 23c4c0b
  

  github-actions[bot]

  and

  nasbench

  authored
  23c4c0b

  Copy full SHA for 23c4c0b

Commits on Sep 13, 2024

• Merge PR SigmaHQ#4980 from @Mahir-Ali-khan - Update DNS Query To Remote Access Software Domain From Non-Browser App

  Show description for 99a47e4
  

  Mahir-Ali-khan

  and

  nasbench

  authored
  99a47e4

  Copy full SHA for 99a47e4

• Merge PR SigmaHQ#5003 from @deFr0ggy - Add Network Connection Initiated To BTunnels Domains

  Show description for 71be3c7
  

  3 peopleauthored
  71be3c7

  Copy full SHA for 71be3c7

• Merge PR SigmaHQ#5005 from @bharat-arora-magnet - Fix PwnKit Local Privilege Escalation

  Show description for fedc6f4
  bharat-arora-magnet

  authored
  fedc6f4

  Copy full SHA for fedc6f4

Pagination

Previous

Next