Commits

Branch selector

 master

User selector

All users

Datepicker

All time

Commit History

Commits on Oct 1, 2024

• Merge pull request #1 from Hwave/create-pull-request/reference-archiver

  Show description for e4e89d8
  Hwave

  authored
  e4e89d8

• Merge pull request #2 from Hwave/create-pull-request/rule-promotion

  Show description for f5b6107
  Hwave

  authored
  f5b6107

• chore: archive new rule references and update cache file

  Hwave

  authored
  0fb2a01

Commits on Aug 1, 2024

• chore: promote older rules status from experimental to test

  Hwave

  authored
  392d123

Commits on Jul 3, 2024

• Merge PR SigmaHQ#4831 from @swachchhanda000 - Add Kapeka backdoor related Sigma rules

  Show description for 0bb6f0c
  

  swachchhanda000

  and

  nasbench

  authored
  0bb6f0c

• Merge PR SigmaHQ#4898 from @ruppde - Fix Potential Exploitation of CVE-2024-3094 - Suspicious SSH Child Process

  Show description for 0511e57
  

  ruppde

  and

  nasbench

  authored
  0511e57

Commits on Jul 2, 2024

• Merge PR SigmaHQ#4894 from @rahulchandran19 - Fix broken logic with Application Removed Via Wmic.EXE

  Show description for 651bee3
  

  rahulchandran19

  and

  nasbench

  authored
  651bee3

• Merge PR SigmaHQ#4893 from @ryanplasma - Update Microsoft references URLS

  Show description for 1d40f1d
  

  ryanplasma

  and

  nasbench

  authored
  1d40f1d

Commits on Jul 1, 2024

• Merge PR SigmaHQ#4892 from @nasbench - Archive new rule references and update cache file

  Show description for 7682688
  

  github-actions[bot]

  and

  nasbench

  authored
  7682688

• Merge PR SigmaHQ#4891 from @nasbench - Promote older rules status from experimental to test

  Show description for 47085e9
  

  github-actions[bot]

  and

  nasbench

  authored
  47085e9

Commits on Jun 26, 2024

• Merge PR SigmaHQ#4890 from @kelnage - Update New Behaviours Okta Admin Console rule

  Show description for 7186743
  

  kelnage

  and

  nasbench

  authored
  7186743

Commits on Jun 25, 2024

• Update Rules (SigmaHQ#4872)

  Show description for 5ea4f99
  nasbench

  authored
  5ea4f99

Commits on Jun 20, 2024

• Merge PR SigmaHQ#4882 from @netgrain - New rules related to LocaltoNet tunneling

  Show description for 5397ea4
  

  3 peopleauthored
  5397ea4

• Merge PR SigmaHQ#4879 from @nasbench - archive new rule references and update cache file

  Show description for 5a05ffc
  

  github-actions[bot]

  and

  nasbench

  authored
  5a05ffc

Commits on Jun 5, 2024

• Merge PR SigmaHQ#4873 from @ruppde - Add the string "mikatz" to relevant rules

  Show description for 0ccbda7
  

  ruppde

  and

  nasbench

  authored
  0ccbda7

• Merge PR SigmaHQ#4773 from @DefenderDaniel - Add rules covering Nscurl usage

  Show description for d7bd600
  

  DefenderDaniel

  and

  nasbench

  authored
  d7bd600

Commits on Jun 3, 2024

• Merge PR SigmaHQ#4778 from @faisalusuf - Add new rule covering suspicious usage of Qemu

  Show description for 06eaf2c
  

  faisalusuf

  and

  nasbench

  authored
  06eaf2c

• Merge PR SigmaHQ#4869 from @ssnkhan - Add new rules detecting Windows Recall feature enabling

  Show description for 09b822c
  

  3 peopleauthored
  09b822c

• Merge PR SigmaHQ#4870 from @himynamesdave - Fix broken link in README.md

  Show description for c4c836a
  himynamesdave

  authored
  c4c836a

• Merge PR SigmaHQ#4867 from @nasbench - Promote older rules status from experimental to test

  Show description for d84959e
  

  github-actions[bot]

  and

  nasbench

  authored
  d84959e

• Merge PR SigmaHQ#4868 from @nasbench - Archive new rule references and update cache file

  Show description for 3be29eb
  

  github-actions[bot]

  and

  nasbench

  authored
  3be29eb

Commits on May 31, 2024

• Merge PR SigmaHQ#4784 from @tomaszdyduch - Add new DarkGate activity related rule

  Show description for 48f2d09
  

  tomaszdyduch

  and

  nasbench

  authored
  48f2d09

• Merge PR SigmaHQ#4866 from @Neo23x0 - Update network connection rules

  Show description for 2bf502f
  

  Neo23x0

  and

  nasbench

  authored
  2bf502f

• Merge PR SigmaHQ#4865 from @pratinavchandra - Add new rules related to "tmutil" potential abuse

  Show description for 9bfe3d6
  

  3 peopleauthored
  9bfe3d6

Commits on May 28, 2024

• Merge PR SigmaHQ#4864 from @cygnetix - Update CA Policy Updated by Non Approved Actor

  Show description for ae45e83
  cygnetix

  authored
  ae45e83

Commits on May 27, 2024

• Merge PR SigmaHQ#4785 from @pratinavchandra - add System Information Discovery Via Sysctl - MacOS

  Show description for 6a5cf5c
  

  pratinavchandra

  and

  nasbench

  authored
  6a5cf5c

• Merge PR SigmaHQ#4840 from @skaynum - Add new rules related to MySQL daemon and potential phishing attempts

  Show description for 9f10345
  

  skaynum

  and

  nasbench

  authored
  9f10345

• Merge PR SigmaHQ#4859 from @vburov - Update casing of Win32_ShadowCopy for multiple rules

  Show description for 92fd446
  

  vburov

  and

  nasbench

  authored
  92fd446

• Merge PR SigmaHQ#4860 from @CR-OfirTal - Fix a typo in the regex of some rules

  Show description for 4163fde
  

  CR-OfirTal

  and

  nasbench

  authored
  4163fde

• Merge PR SigmaHQ#4862 from @frack113 - Add Uncommon Process Access Rights For Target Image

  Show description for 1c1081d
  

  frack113

  and

  nasbench

  authored
  1c1081d

• Merge PR SigmaHQ#4863 from @deFr0ggy - Add network connection counterpart rule for cloudflare tunnels

  Show description for 2fcf250
  

  deFr0ggy

  and

  nasbench

  authored
  2fcf250

• Merge PR SigmaHQ#4855 from @nasbench - Update rule ref archive cache

  Show description for e9cb6fc
  

  github-actions[bot]

  and

  nasbench

  authored
  e9cb6fc

Commits on May 15, 2024

• Remove smart quotes from file_event_win_iphlpapi_dll_sideloading.yml (SigmaHQ#4856)

  jeremyhagan

  authored
  f334abf

Commits on May 13, 2024

• Merge PR SigmaHQ#4853 from @nasbench - Add some cosmetic changes and small updates

  Show description for ed789f5
  nasbench

  authored
  ed789f5

• Merge PR SigmaHQ#4782 from @pratinavchandra - Add Launch Agent/Daemon Execution Via Launchctl

  Show description for 2837671
  

  pratinavchandra

  and

  nasbench

  authored
  2837671

Pagination

PreviousNext