Commits

Branch selector

 master

User selector

All users

Datepicker

All time

Commit History

Commits on Mar 2, 2019

• fix: fix in rule improvement

  

  Florian Roth

  committed
  0c1d02a

• Reworked many rules based on YARA performance guidelines

  Show description for 78706db
  

  Florian Roth

  committed
  78706db

Commits on Mar 1, 2019

• Obfuscated Batch Script

  

  Florian Roth

  committed
  f3371f2

Commits on Feb 28, 2019

• ATM malware dispenserXFS

  

  Florian Roth

  committed
  9e051bd

• IOC fix in commented rule

  

  Florian Roth

  committed
  7c7ae36

• BRONZE UNION hash IOCs

  

  Florian Roth

  committed
  3327c8a

Commits on Feb 26, 2019

• FP: sublime package - recon commands

  

  Florian Roth

  committed
  fe92bee

Commits on Feb 24, 2019

• False Positive Reduction

  

  Florian Roth

  committed
  cb46d0e

• APT BabyShark rule

  Show description for 11bbd51
  

  Florian Roth

  committed
  11bbd51

Commits on Feb 19, 2019

• False Positive Reduction

  

  Florian Roth

  committed
  d0b1e17

• FP ntds.dit location

  

  Florian Roth

  committed
  4c5cbb4

• ntds.dit FP

  

  Florian Roth

  committed
  e6264d4

• FP: svchost.exe size

  

  Florian Roth

  committed
  0448d97

• Author adjustments

  

  Florian Roth

  committed
  8f7335c

• Improved suspicious LNK file rule

  

  Florian Roth

  committed
  4ed1ebc

Commits on Feb 18, 2019

• AUS parliament network compromise

  Show description for 63999eb
  

  Florian Roth

  committed
  63999eb

Commits on Feb 16, 2019

• Suspicious Word VBA Macro strings

  

  Florian Roth

  committed
  1b85e40

• FP: adjusted size of svchost.exe rule

  

  Florian Roth

  committed
  50b0a91

Commits on Feb 14, 2019

• Removed problematic string from rule

  

  Florian Roth

  committed
  31be267

Commits on Feb 13, 2019

• Merged suspicious Office Droppers rule with new rule

  

  Florian Roth

  committed
  77825e5

Commits on Feb 11, 2019

• Sigbase rules CSV update

  

  Florian Roth

  committed
  a8e639a

• Renamed AutoCAD rule

  

  Florian Roth

  committed
  692282b

• Merge pull request Neo23x0#60 from JohnLaTwC/patch-11

  Show description for 1b42ce4
  Neo23x0

  authored
  1b42ce4

• 0x28 is subset of other condition

  Neo23x0

  authored
  6a1f8cc

Commits on Feb 8, 2019

• Create SUSP_autocad_lsp_malware.yar

  JohnLaTwC

  authored
  7ef2cad

Commits on Feb 7, 2019

• CSV now has sorted tags - makes diffs smaller

  

  Florian Roth

  committed
  46075a8

• Merge pull request Neo23x0#59 from JohnLaTwC/patch-10

  Show description for 2d09677
  Neo23x0

  authored
  2d09677

• Minor changes

  Neo23x0

  authored
  ab3b967

• Create gen_macro_StarOffice_suspicious.yar

  Show description for eba6596
  JohnLaTwC

  authored
  eba6596

• Signature base rules CSV update

  

  Florian Roth

  committed
  d919249

• HWP incident filename IOC

  

  Florian Roth

  committed
  06eaa56

• Changed filename

  

  Florian Roth

  committed
  ec6bcf6

• FIlename IOC : ntds.dit in uncommon location

  

  Florian Roth

  committed
  abddb56

Commits on Feb 5, 2019

• update: rule info

  

  Florian Roth

  committed
  75f01d8

• Merge pull request Neo23x0#58 from JohnLaTwC/patch-9

  Show description for ca3960b
  Neo23x0

  authored
  ca3960b

Pagination

PreviousNext