Commits

Branch selector

 master

User selector

Neo23x0

Datepicker

All time

Commit History

Commits on Feb 28, 2025

• Merge PR SigmaHQ#5215 from @Neo23x0 - Fix typo in falsepositives section

  Show description for 5711c8a
  Neo23x0

  authored
  5711c8a

  Copy full SHA for 5711c8a

Commits on Jan 19, 2025

• Merge PR SigmaHQ#5163 from @Neo23x0 - Add/Update Rsync Linux Rules

  Show description for 06a5d08
  

  Neo23x0

  and

  nasbench

  authored
  06a5d08

  Copy full SHA for 06a5d08

• Merge PR SigmaHQ#5164 from @Neo23x0 - Update Exploit Framework User Agent

  Show description for 961753a
  Neo23x0

  authored
  961753a

  Copy full SHA for 961753a

Commits on Jan 15, 2025

• Merge PR SigmaHQ#5159 from @Neo23x0 - Fix Potential CVE-2023-36874 Exploitation - Fake Wermgr.Exe Creation

  Show description for b162730
  Neo23x0

  authored
  b162730

  Copy full SHA for b162730

Commits on Dec 19, 2024

• Merge PR SigmaHQ#5132 from @Neo23x0 - Update DNS Query To Remote Access Software Domain From Non-Browser App

  Show description for e8a6894
  

  Neo23x0

  and

  nasbench

  authored
  e8a6894

  Copy full SHA for e8a6894

Commits on Dec 14, 2024

• Merge PR SigmaHQ#5116 from @Neo23x0 - Add rules and updates related to Cleo exploitation

  Show description for 17dcad4
  

  Neo23x0

  and

  nasbench

  authored
  17dcad4

  Copy full SHA for 17dcad4

Commits on Dec 7, 2024

• Merge PR SigmaHQ#5110 from @Neo23x0 - Update Remote Access Tool Services Have Been Installed - Security

  Show description for ee821b8
  Neo23x0

  authored
  ee821b8

  Copy full SHA for ee821b8

Commits on Dec 3, 2024

• fix: FPs with NetNTLM downgrade attack (SigmaHQ#5108)

  Show description for 6fd57da
  

  Neo23x0

  and

  nasbench

  authored
  6fd57da

  Copy full SHA for 6fd57da

Commits on Nov 29, 2024

• Merge PR SigmaHQ#5093 from @Neo23x0 - Fix Creation of WerFault.exe/Wer.dll in Unusual Folder

  Show description for 374f003
  

  Neo23x0

  and

  nasbench

  authored
  374f003

  Copy full SHA for 374f003

Commits on Nov 13, 2024

• Merge PR SigmaHQ#5076 from @Neo23x0 - Fix Suspicious SYSTEM User Process Creation

  Show description for 5d1cf4b
  Neo23x0

  authored
  5d1cf4b

  Copy full SHA for 5d1cf4b

Commits on Nov 4, 2024

• Merge PR SigmaHQ#5070 from @Neo23x0 - Update .RDP File Created by Outlook Process

  Show description for fe999a5
  

  Neo23x0

  and

  nasbench

  authored
  fe999a5

  Copy full SHA for fe999a5

Commits on Nov 1, 2024

• Merge PR SigmaHQ#5063 from @Neo23x0 - Add & Update rules related to the suspicious creation of ".rdp" files

  Show description for 0cb8d0e
  

  Neo23x0

  and

  nasbench

  authored
  0cb8d0e

  Copy full SHA for 0cb8d0e

Commits on Oct 8, 2024

• Merge PR SigmaHQ#5038 from @Neo23x0 - Update LSASS Process Memory Dump Files

  Show description for a997d62
  

  Neo23x0

  and

  nasbench

  authored
  a997d62

  Copy full SHA for a997d62

Commits on Jul 17, 2024

• Merge PR SigmaHQ#4917 from @Neo23x0 - Update antivirus related rules

  Show description for 49f7571
  

  Neo23x0

  and

  nasbench

  authored
  49f7571

  Copy full SHA for 49f7571

Commits on May 31, 2024

• Merge PR SigmaHQ#4866 from @Neo23x0 - Update network connection rules

  Show description for 2bf502f
  

  Neo23x0

  and

  nasbench

  authored
  2bf502f

  Copy full SHA for 2bf502f

Commits on Apr 14, 2024

• Merge pull request SigmaHQ#4811 from ruppde/master

  Show description for 626a6fc
  Neo23x0

  authored
  626a6fc

  Copy full SHA for 626a6fc

• docs: added modification date

  Neo23x0

  committed
  f8ca605

  Copy full SHA for f8ca605

Commits on Feb 8, 2024

• Merge PR SigmaHQ#4715 from @Neo23x0 - Use Image field in filter

  Show description for eb914a8
  Neo23x0

  authored
  eb914a8

  Copy full SHA for eb914a8

Commits on Feb 7, 2024

• Merge PR SigmaHQ#4703 from @Neo23x0 - Add EventLogCrasher imphash

  Show description for 027ba7e
  Neo23x0

  authored
  027ba7e

  Copy full SHA for 027ba7e

Commits on Jan 15, 2024

• Merge PR SigmaHQ#4674 from @Neo23x0 - Increase hack tool coverage

  Show description for e6e0ffb
  

  3 peopleauthored
  e6e0ffb

  Copy full SHA for e6e0ffb

• Merge PR SigmaHQ#4673 from @Neo23x0 - Update broken reference link

  Show description for 8e064aa
  Neo23x0

  authored
  8e064aa

  Copy full SHA for 8e064aa

Commits on Jan 10, 2024

• Merge PR SigmaHQ#4647 from @Neo23x0 - add new hack tool by imphash

  Show description for 2535a61
  

  3 peoplecommitted
  2535a61

  Copy full SHA for 2535a61

Commits on Nov 17, 2023

• Merge PR SigmaHQ#4576 from @Neo23x0 - Additional Ngrok Domains

  Show description for 68edd16
  

  3 peopleauthored
  68edd16

  Copy full SHA for 68edd16

Commits on Oct 12, 2023

• Merge PR SigmaHQ#4477 from @Neo23x0 - CoercedPotato activity

  Show description for 61e8d42
  

  Neo23x0

  and

  nasbench

  authored
  61e8d42

  Copy full SHA for 61e8d42

Commits on Sep 13, 2023

• Merge PR SigmaHQ#4443 from @Neo23x0 - Fix Null Edge Case & Add New String

  Show description for d68f19a
  

  Neo23x0

  and

  nasbench

  authored
  d68f19a

  Copy full SHA for d68f19a

Commits on Sep 1, 2023

• Merge PR SigmaHQ#4414 from @Neo23x0 - Add new qakbot hashes

  Show description for 64e524f
  

  Neo23x0

  and

  nasbench

  authored
  64e524f

  Copy full SHA for 64e524f

Commits on Aug 31, 2023

• Merge PR SigmaHQ#4408 from @Neo23x0 - Add New Qakbot Rule

  Show description for e11ad35
  

  Neo23x0

  and

  nasbench

  authored
  e11ad35

  Copy full SHA for e11ad35

Commits on Jul 18, 2023

• Merge pull request SigmaHQ#4351 from SigmaHQ/rule-devel

  Show description for 4de6102
  Neo23x0

  authored
  4de6102

  Copy full SHA for 4de6102

• refactor: increased level

  Neo23x0

  committed
  764963c

  Copy full SHA for 764963c

• Merge branch 'master' into rule-devel

  Neo23x0

  committed
  9463000

  Copy full SHA for 9463000

Commits on Jul 17, 2023

• Merge pull request SigmaHQ#4350 from joshnck/patch-4

  Show description for 88fe9c6
  Neo23x0

  authored
  88fe9c6

  Copy full SHA for 88fe9c6

Commits on Jun 28, 2023

• Merge pull request SigmaHQ#4335 from phantinuss/master

  Show description for c9ea380
  Neo23x0

  authored
  c9ea380

  Copy full SHA for c9ea380

Commits on Jun 17, 2023

• fix: FP with keyword

  Neo23x0

  committed
  f65ebba

  Copy full SHA for f65ebba

Commits on Jun 15, 2023

• feat: typo fix and remote access software rule update (SigmaHQ#4313)

  Neo23x0

  authored
  93ebbcb

  Copy full SHA for 93ebbcb

Commits on Jun 14, 2023

• Merge branch 'master' into rule-devel

  Neo23x0

  committed
  fc8b9d4

  Copy full SHA for fc8b9d4

Pagination

Previous

Next