valitydev/SigmaHQ
14
0
Fork 0
mirror of https://github.com/valitydev/SigmaHQ.git synced 2024-11-07 01:45:21 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
7,771 Commits 20 Branches 25 Tags 21 MiB
3b2ebe1580
Commit Graph

7771 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Cyb3rEng
3b2ebe1580
Completed changes 
Removed :
unnecessary event ID
 2021-09-07 21:12:02 -06:00
Cyb3rEng
8467d5a65a
Modified Rule 
Removed :
unnecessary event ID
 2021-09-07 21:09:07 -06:00
Cyb3rEng
f0f3ecfe2f
Converted to LF 
Removed :
unnecessary event ID
 2021-09-07 21:00:35 -06:00
Cyb3rEng
932b7cf2ba
Merge branch 'SigmaHQ:master' into master 2021-09-07 19:58:09 -06:00
Thomas Patzke
d9edc9f0e3 Merge branch 'fix' 2021-09-08 00:19:09 +02:00
Thomas Patzke
143744bc12 Various fixes 
* Backslashes in regular expressions
* Casing of condition operators
* Further small errors
 2021-09-07 23:38:07 +02:00
frack113
439175d75d
Merge pull request #1999 from rachelrice/update_aws_login_profile 
Update AWS Update Login Profile Rule fields
 2021-09-07 18:18:48 +02:00
Rachel Rice
be5351947c
Unset date update 
Signed-off-by: Rachel Rice <rachel.rice@lacework.net>
 2021-09-07 16:36:59 +01:00
Rachel Rice
eef6e71e2e
Update AWS Update Login Profile Rule fields 
Missed updating field from `responseElements.accessKey.userName` to `requestParameters.userName` on last update.
 2021-09-07 12:39:56 +01:00
Florian Roth
10726bbb1f
Merge pull request #1998 from SigmaHQ/rule-devel 
PRIVATELOG image load
 2021-09-07 12:08:46 +02:00
Florian Roth
cfbde22d2d
rule: PRIVATELOG image load 2021-09-07 10:10:14 +02:00
Florian Roth
3a305e82b9
fix: remove renamed files 2021-09-07 09:28:20 +02:00
Florian Roth
a8d8d878a0
remove uppercase files 2021-09-07 09:27:11 +02:00
Florian Roth
8b4fce3473
removed unneeded upper ticks 2021-09-07 09:21:44 +02:00
Florian Roth
c082ce0fe0
Merge branch 'master' into rule-devel 2021-09-07 09:20:47 +02:00
Florian Roth
57bfdc7a02
fix: more upper case chars 2021-09-07 09:19:23 +02:00
Florian Roth
0cce1c0245
fix: missing lowercase chars 2021-09-07 09:17:25 +02:00
Florian Roth
33be089ea2
fix: filename to lowercase 2021-09-07 09:16:35 +02:00
frack113
4f6b87fed5
Merge pull request #1997 from zakibro/master 
New Rule - Linux Hidden Files and Directories
 2021-09-07 09:12:04 +02:00
zakibro
bba66ca762
Update lnx_auditd_hidden_files_directories.yml 
Updating arguments section
 2021-09-07 07:57:50 +02:00
frack113
21fef1af4a
Merge pull request #1996 from austinsonger/azure_federation_modified.yml 
azure_federation_modified.yml
 2021-09-07 06:24:20 +02:00
frack113
be442182fe convert to LF 2021-09-06 21:10:08 +02:00
frack113
9ef299c4f4 Change to LF 2021-09-06 21:07:49 +02:00
frack113
3b95b0c913
Remove useless Eventid 
Use tools/config/generic/windows-audit.yml to convert for security 4688
 2021-09-06 20:56:41 +02:00
zakibro
e9fa5bde2b
Update lnx_auditd_hidden_files_directories.yml 
Correction of tag
 2021-09-06 18:55:58 +02:00
Pawel Mazur
7c2895c73f New Rule - Linux Hidden Files and Directories 2021-09-06 18:43:49 +02:00
Pawel Mazur
59eb7ce032 Merge branch 'master' of https://github.com/zakibro/sigma 2021-09-06 18:41:19 +02:00
Pawel Mazur
9f5f25e480 New Rule - Linux Hidden Files and Directories 2021-09-06 18:40:39 +02:00
zakibro
f52860d6ab
Merge branch 'SigmaHQ:master' into master 2021-09-06 18:40:02 +02:00
Pawel Mazur
3eb354e34c Merge branch 'master' of https://github.com/zakibro/sigma 2021-09-06 18:37:45 +02:00
Pawel Mazur
ef3efd8fd3 New Rule Linux - Hidden Files and Directories 2021-09-06 18:37:02 +02:00
Austin Songer
0de95e355a
Update azure_federation_modified.yml 2021-09-06 11:31:52 -05:00
Austin Songer
e6e3fc2eec
Update azure_federation_modified.yml 2021-09-06 11:16:35 -05:00
Austin Songer
6025df63ee
Create azure_federation_modified.yml 2021-09-06 11:06:58 -05:00
Florian Roth
6b2bacd2cc
Merge pull request #1979 from frack113/test_global 
Change ID in global action rule
 2021-09-06 08:44:14 +02:00
frack113
013eb2e11f
Merge pull request #1993 from zakibro/master 
New Rule - Linux-Audio-Capture
 2021-09-05 18:30:45 +02:00
frack113
4bfdbf5442 Merge branch 'test_global' of https://github.com/frack113/sigma into test_global 2021-09-05 17:51:11 +02:00
frack113
dc88ad7c73 fix sigma_uuid assign id 2021-09-05 17:50:54 +02:00
frack113
981d330d20 Merge branch 'test_global' of github.com:frack113/sigma into test_global 2021-09-05 12:37:52 +02:00
frack113
c82a652a34 Revert win_apt_apt29_tor.yml 2021-09-05 12:37:30 +02:00
frack113
44a5792be3 Revert win_apt_apt29_tor.yml 2021-09-05 12:34:24 +02:00
frack113
b0964250b1 Update win_apt_apt29_tor.yml 2021-09-05 12:23:45 +02:00
frack113
ca4c156fa4 Update win_apt_apt29_tor.yml 2021-09-05 11:20:57 +02:00
frack113
acf2bfbd27 Update sigma_uuid verify 
Make a better verify code
 2021-09-05 10:43:42 +02:00
zakibro
5042ba65ac
Update lnx_auditd_audio_capture.yml 
Added more references about arecord.
 2021-09-05 09:28:53 +02:00
frack113
254b43f17f
Merge pull request #1994 from austinsonger/sysmon_mal_cobaltstrike_re.yml 
Update sysmon_mal_cobaltstrike_re.yml
 2021-09-05 09:20:22 +02:00
Austin Songer
fa5554660c
Update sysmon_mal_cobaltstrike_re.yml 2021-09-04 17:33:05 -05:00
Pawel Mazur
caf78b5ea1 New Rule - Linux-Audio-Capture 2021-09-04 22:10:34 +02:00
frack113
2d9e09ecc3
Merge pull request #1991 from austinsonger/Azure-Rules 
Azure rules
 2021-09-04 08:43:00 +02:00
Austin Songer
e7c5827776
Update azure_service_principal_removed.yml 2021-09-03 22:43:11 -05:00