Commits

Branch selector

 master

User selector

All users

All time

Commit History

Commits on Aug 1, 2024

• Merge PR #4945 from @GtUGtHGtNDtEUaE - Fix typo in field name for rules leveraging EID 5145

  Show description for 782f0f5
  GtUGtHGtNDtEUaE

  authored
  782f0f5

  Copy full SHA for 782f0f5

• Merge PR #4944 from @YamatoSecurity - Add missing `expand` modifier

  Show description for c5e352c
  YamatoSecurity

  authored
  c5e352c

  Copy full SHA for c5e352c

• Merge PR #4763 from @swachchhanda000 - New rules related to Raspberry Robin TTPs

  Show description for 3359340
  

  3 peopleauthored
  3359340

  Copy full SHA for 3359340

• Merge PR #4943 from @nasbench - Archive new rule references and update cache file

  Show description for b8e67f1
  

  github-actions[bot]

  and

  nasbench

  authored
  b8e67f1

  Copy full SHA for b8e67f1

• Merge PR #4942 from @nasbench - promote older rules status from experimental to test

  Show description for 6b78144
  

  github-actions[bot]

  and

  nasbench

  authored
  6b78144

  Copy full SHA for 6b78144

Commits on Jul 31, 2024

• Merge PR #4885 from @LucaInfoSec - Add `Potential CSharp Streamer RAT Loading .NET Executable Image`

  Show description for 6800135
  

  LucaInfoSec

  and

  nasbench

  authored
  6800135

  Copy full SHA for 6800135

• Merge PR #4929 from @DefenderDaniel - Add `Clipboard Data Collection Via Pbpaste`

  Show description for 42f90bb
  

  DefenderDaniel

  and

  nasbench

  authored
  42f90bb

  Copy full SHA for 42f90bb

• Merge PR #4934 from @X-Junior - Update and add new `file_access` rules

  Show description for 65d76a3
  

  X-Junior

  and

  nasbench

  authored
  65d76a3

  Copy full SHA for 65d76a3

• Merge PR #4940 from @fukusuket - Update unreachable references `blog.menasec[.]net`

  Show description for 41dfd8f
  fukusuket

  authored
  41dfd8f

  Copy full SHA for 41dfd8f

Commits on Jul 30, 2024

• Merge PR #4938 from @frack113 - Add CVE-2024-37085 detection rules

  Show description for b723173
  

  frack113

  and

  nasbench

  authored
  b723173

  Copy full SHA for b723173

Commits on Jul 29, 2024

• Merge PR #4931 from @romain-gaillard - Add additional GitHub audit detection rules

  Show description for e1803cb
  

  romain-gaillard

  and

  nasbench

  authored
  e1803cb

  Copy full SHA for e1803cb

• Merge PR #4933 from @fornotes - Add `Remote Thread Created In Shell Application`

  Show description for b4efa21
  

  fornotes

  and

  nasbench

  authored
  b4efa21

  Copy full SHA for b4efa21

• Merge PR #4936 from @Alex-Walston - Add `Potential APT FIN7 Exploitation Activity`

  Show description for 7f5e0cc
  

  Alex-Walston

  and

  nasbench

  authored
  7f5e0cc

  Copy full SHA for 7f5e0cc

Commits on Jul 24, 2024

• Merge PR #4928 from @nasbench - Fix FPs and issues found in testing

  Show description for 779111a
  nasbench

  authored
  779111a

  Copy full SHA for 779111a

Commits on Jul 23, 2024

• Merge PR #4924 from @fornotes - Fix `Anydesk Temporary Artefact`

  Show description for ab32554
  fornotes

  authored
  ab32554

  Copy full SHA for ab32554

• Merge PR #4919 from @MATTANDERS0N - Added new detections related BOINC

  Show description for 6df2ba3
  

  MATTANDERS0N

  and

  nasbench

  authored
  6df2ba3

  Copy full SHA for 6df2ba3

Commits on Jul 22, 2024

• Merge PR #4920 from @fornotes - Update `file_access` based rules

  Show description for b53c9bd
  

  fornotes

  and

  nasbench

  authored
  b53c9bd

  Copy full SHA for b53c9bd

• Merge PR #4922 from @romain-gaillard - Update `Github High Risk Configuration Disabled`

  Show description for 29d0679
  

  romain-gaillard

  and

  nasbench

  authored
  29d0679

  Copy full SHA for 29d0679

• Merge PR #4921 from @romain-gaillard - update `Github Secret Scanning Feature Disabled`

  Show description for bcb5e6b
  

  romain-gaillard

  and

  nasbench

  authored
  bcb5e6b

  Copy full SHA for bcb5e6b

Commits on Jul 19, 2024

• Merge PR #4918 from @joshnck - Update `goodlog-tests.yml`

  Show description for 6dd993a
  joshnck

  authored
  6dd993a

  Copy full SHA for 6dd993a

Commits on Jul 17, 2024

• Merge PR #4917 from @Neo23x0 - Update antivirus related rules

  Show description for 49f7571
  

  Neo23x0

  and

  nasbench

  authored
  49f7571

  Copy full SHA for 49f7571

• Merge branch 'SigmaHQ:master' into master

  nasbench

  authored
  af9ffdb

  Copy full SHA for af9ffdb

• Merge PR #4888 from @nasbench - Add multiple new rules, updates and fixes

  Show description for 313578e
  nasbench

  authored
  313578e

  Copy full SHA for 313578e

• Merge PR #4916 from @frack113 - Move some rules to Emerging-Threats folder

  Show description for 3c7fcf6
  frack113

  authored
  3c7fcf6

  Copy full SHA for 3c7fcf6

Commits on Jul 16, 2024

• Revert "Update registry_set_susp_run_key_img_folder.yml"

  Show description for f2985e6
  nasbench

  committed
  f2985e6

  Copy full SHA for f2985e6

• Update registry_set_susp_run_key_img_folder.yml

  nasbench

  committed
  cd7cc10

  Copy full SHA for cd7cc10

Commits on Jul 15, 2024

• Merge PR #4878 from @prashanthpulisetti - Update "Create Remote Thread" based rules

  Show description for 568f1ae
  

  0xPrashanthSec

  and

  nasbench

  authored
  568f1ae

  Copy full SHA for 568f1ae

• Merge PR #4915 from @nasbench - Archive new rule references and update cache file

  Show description for 73f0078
  

  github-actions[bot]

  and

  nasbench

  authored
  73f0078

  Copy full SHA for 73f0078

Commits on Jul 11, 2024

• Merge PR #4903 from @nischalkhadgi62 - Add `Directory Service Restore Mode(DSRM) Registry Value Tampering`

  Show description for 96f5ae8
  

  nischalkhadgi62

  and

  nasbench

  authored
  96f5ae8

  Copy full SHA for 96f5ae8

• Merge PR #4902 from @joshnck - Add `BitlockerTogo.EXE Execution`

  Show description for 784ae8d
  

  joshnck

  and

  nasbench

  authored
  784ae8d

  Copy full SHA for 784ae8d

• Merge PR #4899 from @kelnage - Add Kubernetes rules in audit log format

  Show description for 97034d2
  

  kelnage

  and

  nasbench

  authored
  97034d2

  Copy full SHA for 97034d2

• Merge PR #4900 from @jamesc-grafana - Add new AWS cloudtrail rules

  Show description for f95d539
  

  jamesc-grafana

  and

  nasbench

  authored
  f95d539

  Copy full SHA for f95d539

• Merge PR #4906 from @fornotes - Update and add new dll sideloading rules

  Show description for d4cb9fd
  

  fornotes

  and

  nasbench

  authored
  d4cb9fd

  Copy full SHA for d4cb9fd

• Merge PR #4912 from @nasbench - update `pySigma-validators-sigmahq` to version 0.7.0 and `sigma_cli_conf.yml`

  Show description for c2915a6
  

  nasbench

  and

  frack113

  authored
  c2915a6

  Copy full SHA for c2915a6

• Merge PR #4910 from @dr0pd34d - Add `Microsoft Word Add-In Loaded`

  Show description for 5f9d70c
  

  dr0pd34d

  and

  nasbench

  authored
  5f9d70c

  Copy full SHA for 5f9d70c