Commits

Branch selector

 master

User selector

All users

All time

Commit History

Commits on Jun 5, 2024

• Merge PR #4873 from @ruppde - Add the string "mikatz" to relevant rules

  

  ruppde

  and

  nasbench

  committedJun 5, 2024
  0ccbda7

• Merge PR #4773 from @DefenderDaniel - Add rules covering Nscurl usage

  

  DefenderDaniel

  and

  nasbench

  committedJun 5, 2024
  d7bd600

Commits on Jun 3, 2024

• Merge PR #4778 from @faisalusuf - Add new rule covering suspicious usage of Qemu

  

  faisalusuf

  and

  nasbench

  committedJun 3, 2024
  06eaf2c

• Merge PR #4869 from @ssnkhan - Add new rules detecting Windows Recall feature enabling

  

  3 peoplecommittedJun 3, 2024
  09b822c

• Merge PR #4870 from @himynamesdave - Fix broken link in README.md

  himynamesdave

  committedJun 3, 2024
  c4c836a

• Merge PR #4867 from @nasbench - Promote older rules status from experimental to test

  

  github-actions[bot]

  and

  nasbench

  committedJun 3, 2024
  d84959e

• Merge PR #4868 from @nasbench - Archive new rule references and update cache file

  

  github-actions[bot]

  and

  nasbench

  committedJun 3, 2024
  3be29eb

Commits on May 31, 2024

• Merge PR #4784 from @tomaszdyduch - Add new DarkGate activity related rule

  

  tomaszdyduch

  and

  nasbench

  committedMay 31, 2024
  48f2d09

• Merge PR #4866 from @Neo23x0 - Update network connection rules

  

  Neo23x0

  and

  nasbench

  committedMay 31, 2024
  2bf502f

• Merge PR #4865 from @pratinavchandra - Add new rules related to "tmutil" potential abuse

  

  3 peoplecommittedMay 31, 2024
  9bfe3d6

Commits on May 28, 2024

• Merge PR #4864 from @cygnetix - Update CA Policy Updated by Non Approved Actor

  cygnetix

  committedMay 28, 2024
  ae45e83

Commits on May 27, 2024

• Merge PR #4785 from @pratinavchandra - add System Information Discovery Via Sysctl - MacOS

  

  pratinavchandra

  and

  nasbench

  committedMay 27, 2024
  6a5cf5c

• Merge PR #4840 from @skaynum - Add new rules related to MySQL daemon and potential phishing attempts

  

  skaynum

  and

  nasbench

  committedMay 27, 2024
  9f10345

• Merge PR #4859 from @vburov - Update casing of Win32_ShadowCopy for multiple rules

  

  vburov

  and

  nasbench

  committedMay 27, 2024
  92fd446

• Merge PR #4860 from @CR-OfirTal - Fix a typo in the regex of some rules

  

  CR-OfirTal

  and

  nasbench

  committedMay 27, 2024
  4163fde

• Merge PR #4862 from @frack113 - Add Uncommon Process Access Rights For Target Image

  

  frack113

  and

  nasbench

  committedMay 27, 2024
  1c1081d

• Merge PR #4863 from @deFr0ggy - Add network connection counterpart rule for cloudflare tunnels

  

  deFr0ggy

  and

  nasbench

  committedMay 27, 2024
  2fcf250

• Merge PR #4855 from @nasbench - Update rule ref archive cache

  

  github-actions[bot]

  and

  nasbench

  committedMay 27, 2024
  e9cb6fc

Commits on May 15, 2024

• Remove smart quotes from file_event_win_iphlpapi_dll_sideloading.yml (#4856)

  jeremyhagan

  committedMay 15, 2024
  f334abf

Commits on May 13, 2024

• Merge PR #4853 from @nasbench - Add some cosmetic changes and small updates

  nasbench

  committedMay 13, 2024
  ed789f5

• Merge PR #4782 from @pratinavchandra - Add Launch Agent/Daemon Execution Via Launchctl

  

  pratinavchandra

  and

  nasbench

  committedMay 13, 2024
  2837671

• Merge PR #4818 from @swachchhanda000 - Add Potentially Suspicious Child Process Of KeyScrambler.exe

  

  swachchhanda000

  and

  nasbench

  committedMay 13, 2024
  bd454b6

• Merge PR #4852 from @frack113 - Add Potential Packet Capture Activity Via Start-NetEventSession - ScriptBlock

  

  frack113

  and

  nasbench

  committedMay 13, 2024
  fb3a72b

• Merge PR #4850 from @frack113 - Cleanup rule conditions to align with standard

  

  frack113

  and

  nasbench

  committedMay 13, 2024
  7d6f32d

• Merge PR #4830 from @frack113 - Enhance Wbadmin based rules

  

  frack113

  and

  nasbench

  committedMay 13, 2024
  aaf51bf

• Merge PR #4851 from @frack113 - Fix typo in modifier usage

  frack113

  committedMay 13, 2024
  9341930

Commits on May 10, 2024

• Merge PR #4822 from @hasselj - Add Potentially Suspicious Malware Callback Communication - Linux

  

  hasselj

  and

  nasbench

  committedMay 10, 2024
  6412c1a

• Merge PR #4838 from @frack113 - Add Access To Windows Outlook Mail Files By Uncommon Application

  

  frack113

  and

  nasbench

  committedMay 10, 2024
  fe26ffa

• Merge PR #4839 from @joshnck - Add New RDP Connection Initiated From Domain Controller

  

  3 peoplecommittedMay 10, 2024
  0192a52

• Merge PR #4845 from @ahmedfarou22 - Proxy WebDAV Rule Improvements/New Rule

  

  ahmedfarou22

  and

  nasbench

  committedMay 10, 2024
  b175b15

• Merge PR #4843 from @frack113 - Add New-NetFirewallRule usage related rules

  

  frack113

  and

  nasbench

  committedMay 10, 2024
  392e3a3

• Merge PR #4844 from @frack113 - Update UAC based rules

  

  frack113

  and

  nasbench

  committedMay 10, 2024
  7cdcb76

• Merge PR #4847 from @frack113 - Update test Workflow to use pySigma-validators-sigmahq

  frack113

  committedMay 10, 2024
  2cfa9a2

Commits on May 2, 2024

• Merge PR #4841 from @nasbench - Promote older rules status from experimental to test

  github-actions[bot]

  committedMay 2, 2024
  f7ec533

• Merge PR #4842 from @nasbench - Archive new rule references and update cache file

  github-actions[bot]

  committedMay 2, 2024
  45b93fc

Pagination

PreviousNext