Commits

Branch selector

 0.8

User selector

All users

Datepicker

All time

Commit History

Commits on Feb 28, 2019

• Sigma tools release 0.8

  thomaspatzke

  committed
  690807c

  Copy full SHA for 690807c

Commits on Feb 26, 2019

• Rule: added SAM export

  

  Florian Roth

  committed
  8ce4b15

  Copy full SHA for 8ce4b15

Commits on Feb 24, 2019

• Merge pull request SigmaHQ#246 from james0d0a/master

  Show description for 58a32f3
  thomaspatzke

  authored
  58a32f3

  Copy full SHA for 58a32f3

• Rule: certutil encode

  

  Florian Roth

  committed
  f278a00

  Copy full SHA for f278a00

• Rule: BabyShark activity

  

  Florian Roth

  committed
  e7f5cbc

  Copy full SHA for e7f5cbc

• fix: bugfix in BEAR activity rule

  

  Florian Roth

  committed
  a60b53a

  Copy full SHA for a60b53a

• Merge pull request SigmaHQ#262 from TareqAlKhatib/sysinternals

  Show description for 8b7f050
  Neo23x0

  authored
  8b7f050

  Copy full SHA for 8b7f050

• Added a detection path through process spawn

  

  Tareq AlKhatib

  committed
  7d3d819

  Copy full SHA for 7d3d819

Commits on Feb 23, 2019

• Merge pull request SigmaHQ#260 from TareqAlKhatib/malware_backconnect

  Show description for bdf0dd8
  Neo23x0

  authored
  bdf0dd8

  Copy full SHA for bdf0dd8

• Added private IP filter to reduce FPs

  TareqAlKhatib

  committed
  a022333

  Copy full SHA for a022333

• chore: workaround Travis Python 3.5 problems

  

  Florian Roth

  committed
  f25416b

  Copy full SHA for f25416b

• Merge pull request SigmaHQ#254 from darkquasar/master

  Show description for afa1824
  Neo23x0

  authored
  afa1824

  Copy full SHA for afa1824

Commits on Feb 22, 2019

• Merge pull request SigmaHQ#248 from megan201296/patch-17

  Show description for c17f9d1
  thomaspatzke

  authored
  c17f9d1

  Copy full SHA for c17f9d1

• Changed registry root key

  Show description for 02239fa
  thomaspatzke

  authored
  02239fa

  Copy full SHA for 02239fa

• Merge pull request SigmaHQ#255 from vburov/patch-1

  Show description for 18d012c
  thomaspatzke

  authored
  18d012c

  Copy full SHA for 18d012c

• Added further NirSoft tool parameters

  thomaspatzke

  authored
  5c63ef1

  Copy full SHA for 5c63ef1

• Update win_susp_process_creations.yml

  vburov

  authored
  bdf44be

  Copy full SHA for bdf44be

• adding MPreter as McAfee classifies it

  Show description for 87994ca
  darkquasar

  authored
  87994ca

  Copy full SHA for 87994ca

Commits on Feb 21, 2019

• Rule: suspicious pipes extended

  Show description for d3b623e
  

  Florian Roth

  committed
  d3b623e

  Copy full SHA for d3b623e

• Rule: extended exec location rule to support 4688 events

  

  Florian Roth

  committed
  343a40c

  Copy full SHA for 343a40c

• Merge pull request SigmaHQ#252 from keepwatch/patch-1

  Show description for c8701ac
  Neo23x0

  authored
  c8701ac

  Copy full SHA for c8701ac

• BEAR activity - CrowdStrike GTR 2019

  Show description for 8ae37f5
  

  Florian Roth

  committed
  8ae37f5

  Copy full SHA for 8ae37f5

• fix: bugfix in Judgement Panda rule

  

  Florian Roth

  committed
  3a994d0

  Copy full SHA for 3a994d0

• fix: added MITRE ATT&CK tags to APT rule

  

  Florian Roth

  committed
  5935eaa

  Copy full SHA for 5935eaa

• fix: bugfix in Judgement Panda rule

  

  Florian Roth

  committed
  aca4709

  Copy full SHA for aca4709

• Judgement Panda - Crowdstrike GTR 2019

  Show description for c474bfc
  

  Florian Roth

  committed
  c474bfc

  Copy full SHA for c474bfc

Commits on Feb 20, 2019

• Fixing yara condition

  keepwatch

  authored
  07dec06

  Copy full SHA for 07dec06

Commits on Feb 19, 2019

• Grep backend escapes +

  thomaspatzke

  committed
  9ef3144

  Copy full SHA for 9ef3144

Commits on Feb 18, 2019

• Merge pull request SigmaHQ#249 from TareqAlKhatib/duplicate_filters

  Show description for eeae74e
  Neo23x0

  authored
  eeae74e

  Copy full SHA for eeae74e

• Added a test for duplicate filters and a test for Source: Eventlog

  TareqAlKhatib

  committed
  ae62acf

  Copy full SHA for ae62acf

• Merged 'Eventlog Cleared' and 'Eventlog Cleared Experimental'

  TareqAlKhatib

  committed
  2e3a2b9

  Copy full SHA for 2e3a2b9

Commits on Feb 16, 2019

• Rule: RDP over Reverse SSH Tunnel

  

  Florian Roth

  committed
  f0a4aed

  Copy full SHA for f0a4aed

• doc: SANS webcast link in README

  Neo23x0

  authored
  08e0094

  Copy full SHA for 08e0094

Commits on Feb 13, 2019

• Create win_mal_ursnif.yml

  megan201296

  authored
  34f9d17

  Copy full SHA for 34f9d17

• Merge pull request SigmaHQ#247 from TareqAlKhatib/duplicate_filters

  Show description for 2e61233
  Neo23x0

  authored
  2e61233

  Copy full SHA for 2e61233

Pagination

Previous

Next