Commits

Breadcrumbs

History for

onmaster

User selector

All users

Datepicker

All time

Commit History

Commits on Apr 23, 2021

• Merge pull request SigmaHQ#1432 from SigmaHQ/rule-devel

  Show description for 64f5af4
  Neo23x0

  authored
  64f5af4

  Copy full SHA for 64f5af4

• fix: splunk for windows config errors

  Neo23x0

  committed
  13347df

  Copy full SHA for 13347df

Commits on Apr 20, 2021

• Merge pull request SigmaHQ#1414 from herrBez/fix-542-dsl-aggregation-without-aggfield

  Show description for 35e6e51
  thomaspatzke

  authored
  35e6e51

  Copy full SHA for 35e6e51

Commits on Apr 17, 2021

• Fix SyntaxWarning for 'is' on fireeye-helix backend

  

  Cedric Hien

  committed
  2ff27aa

  Copy full SHA for 2ff27aa

Commits on Apr 6, 2021

• Fix es-dsl aggregation generation when aggfield is not given

  Show description for 3b30a91
  herrBez

  committed
  3b30a91

  Copy full SHA for 3b30a91

Commits on Apr 5, 2021

• Merge pull request SigmaHQ#1407 from JohnConnorRF/winlogbeat_config_update

  Show description for 5118be6
  thomaspatzke

  authored
  5118be6

  Copy full SHA for 5118be6

• Merge pull request SigmaHQ#1408 from roysjosh/es-rule-threshold

  Show description for 82fd5ca
  thomaspatzke

  authored
  82fd5ca

  Copy full SHA for 82fd5ca

• Merge pull request SigmaHQ#1409 from roysjosh/es-barf-on-multiple-conditions

  Show description for d789eb9
  thomaspatzke

  authored
  d789eb9

  Copy full SHA for d789eb9

• Merge pull request SigmaHQ#1411 from wietze/mdatp_improvements

  Show description for 9606fc9
  thomaspatzke

  authored
  9606fc9

  Copy full SHA for 9606fc9

Commits on Apr 2, 2021

• Replaced pip requirements with pipenv

  thomaspatzke

  committed
  5f2ff99

  Copy full SHA for 5f2ff99

Commits on Apr 1, 2021

• Removed unnecessary imports

  wietze

  committed
  30c6d75

  Copy full SHA for 30c6d75

• Apply changes to Defender for Endpoint backend

  wietze

  committed
  fb1bb91

  Copy full SHA for fb1bb91

• Added in Product entry for winlogbeat-old

  JohnConnorRF

  committed
  477f05c

  Copy full SHA for 477f05c

• Added Product field to winlogbeat-modules-enabled.config. Note that the ECS details for Process do not include Product (https://www.elastic.co/guide/en/ecs/1.4/ecs-process.html) so winlog.event_dat…

  Show description for 1f3ee87
  JohnConnorRF

  committed
  1f3ee87

  Copy full SHA for 1f3ee87

• Merge pull request SigmaHQ#1406 from roysjosh/winlogbeat-mapping

  Show description for 2560f40
  Neo23x0

  authored
  2560f40

  Copy full SHA for 2560f40

Commits on Mar 31, 2021

• Elastic: raise an error from the base backend if a rule has multiple conditions

  roysks

  committed
  7923852

  Copy full SHA for 7923852

• Implement Elastic threshold detection rules

  Show description for 0448e46
  roysks

  committed
  0448e46

  Copy full SHA for 0448e46

Commits on Mar 30, 2021

• Updated winlogbeat configuration file to support File Product details

  JohnConnorRF

  committed
  3fd396f

  Copy full SHA for 3fd396f

• Map CommandLine appropriately

  Show description for 30ab2aa
  roysks

  committed
  30ab2aa

  Copy full SHA for 30ab2aa

Commits on Mar 29, 2021

• Merge pull request SigmaHQ#1402 from refractionPOINT/lc-support-live-wel

  Show description for eb98f0b
  thomaspatzke

  authored
  eb98f0b

  Copy full SHA for eb98f0b

• Merge pull request SigmaHQ#1380 from iosonogio/bugfix/netwitness-null

  Show description for ac1f82f
  Neo23x0

  authored
  ac1f82f

  Copy full SHA for ac1f82f

Commits on Mar 25, 2021

• Add option to support different LimaCharlie targets.

  maximelb

  committed
  e066603

  Copy full SHA for e066603

Commits on Mar 20, 2021

• fix: missing index field in FE helix config

  Neo23x0

  committed
  7d7dd4c

  Copy full SHA for 7d7dd4c

• Merge branch 'rule-devel' of https://github.com/SigmaHQ/sigma into rule-devel

  Neo23x0

  committed
  8b145e2

  Copy full SHA for 8b145e2

• fix: wrong indentation in fireeye helix mapping

  Neo23x0

  committed
  58a1ab9

  Copy full SHA for 58a1ab9

• Merge branch 'master' into rule-devel

  Neo23x0

  authored
  e47ee24

  Copy full SHA for e47ee24

• feat: MSExchange Management log mapping

  Neo23x0

  committed
  9e287a1

  Copy full SHA for 9e287a1

• fix: duplicate field values in YAML configs

  Neo23x0

  committed
  1fc408b

  Copy full SHA for 1fc408b

• Merge pull request SigmaHQ#1392 from hustlibraco/patch-1

  Show description for 6ac6b92
  Neo23x0

  authored
  6ac6b92

  Copy full SHA for 6ac6b92

Commits on Mar 18, 2021

• Updated for use with Image Load events

  Show description for 42e82c9
  albchen

  authored
  42e82c9

  Copy full SHA for 42e82c9

Commits on Mar 17, 2021

• fix: syntax error in THOR's config file

  

  Codehardt

  committed
  6d62645

  Copy full SHA for 6d62645

Commits on Mar 15, 2021

• Update winlogbeat.yml

  Show description for 3c5624c
  hustlibraco

  authored
  3c5624c

  Copy full SHA for 3c5624c

• Update winlogbeat.yml

  Show description for 2971a08
  hustlibraco

  authored
  2971a08

  Copy full SHA for 2971a08

Commits on Mar 13, 2021

• Merge pull request SigmaHQ#1309 from WuerthIT:logsourcemerging

  Show description for f4734cd
  thomaspatzke

  authored
  f4734cd

  Copy full SHA for f4734cd

• Merge pull request SigmaHQ#1325 from dennispo/align-simac-stixshifter

  Show description for c13f3f1
  thomaspatzke

  authored
  c13f3f1

  Copy full SHA for c13f3f1

Pagination

Previous

Next