7731 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
zakibro	458973af81	Update lnx_auditd_hidden_files_steganography.yml ... Adding missing field: action	2021-09-09 16:52:58 +02:00
zakibro	62db796fc2	Update lnx_auditd_hidden_files_steganography.yml ... Formatting changes	2021-09-09 16:46:41 +02:00
zakibro	0971fe1d49	Update lnx_auditd_hidden_files_steganography.yml ... Fixing the listing issue	2021-09-09 16:27:57 +02:00
Pawel Mazur	41458d8a5a	New Rule - Linux Auditd Hidden Files - Steganography	2021-09-09 16:13:27 +02:00
zakibro	bba66ca762	Update lnx_auditd_hidden_files_directories.yml ... Updating arguments section	2021-09-07 07:57:50 +02:00
zakibro	e9fa5bde2b	Update lnx_auditd_hidden_files_directories.yml ... Correction of tag	2021-09-06 18:55:58 +02:00
Pawel Mazur	7c2895c73f	New Rule - Linux Hidden Files and Directories	2021-09-06 18:43:49 +02:00
Pawel Mazur	59eb7ce032	Merge branch 'master' of https://github.com/zakibro/sigma	2021-09-06 18:41:19 +02:00
Pawel Mazur	9f5f25e480	New Rule - Linux Hidden Files and Directories	2021-09-06 18:40:39 +02:00
zakibro	f52860d6ab	Merge branch 'SigmaHQ:master' into master	2021-09-06 18:40:02 +02:00
Pawel Mazur	3eb354e34c	Merge branch 'master' of https://github.com/zakibro/sigma	2021-09-06 18:37:45 +02:00
Pawel Mazur	ef3efd8fd3	New Rule Linux - Hidden Files and Directories	2021-09-06 18:37:02 +02:00
Florian Roth	6b2bacd2cc	Merge pull request #1979 from frack113/test_global ... Change ID in global action rule	2021-09-06 08:44:14 +02:00
frack113	013eb2e11f	Merge pull request #1993 from zakibro/master ... New Rule - Linux-Audio-Capture	2021-09-05 18:30:45 +02:00
frack113	4bfdbf5442	Merge branch 'test_global' of https://github.com/frack113/sigma into test_global	2021-09-05 17:51:11 +02:00
frack113	dc88ad7c73	fix sigma_uuid assign id	2021-09-05 17:50:54 +02:00
frack113	981d330d20	Merge branch 'test_global' of github.com:frack113/sigma into test_global	2021-09-05 12:37:52 +02:00
frack113	c82a652a34	Revert win_apt_apt29_tor.yml	2021-09-05 12:37:30 +02:00
frack113	44a5792be3	Revert win_apt_apt29_tor.yml	2021-09-05 12:34:24 +02:00
frack113	b0964250b1	Update win_apt_apt29_tor.yml	2021-09-05 12:23:45 +02:00
frack113	ca4c156fa4	Update win_apt_apt29_tor.yml	2021-09-05 11:20:57 +02:00
frack113	acf2bfbd27	Update sigma_uuid verify ... Make a better verify code	2021-09-05 10:43:42 +02:00
zakibro	5042ba65ac	Update lnx_auditd_audio_capture.yml ... Added more references about arecord.	2021-09-05 09:28:53 +02:00
frack113	254b43f17f	Merge pull request #1994 from austinsonger/sysmon_mal_cobaltstrike_re.yml ... Update sysmon_mal_cobaltstrike_re.yml	2021-09-05 09:20:22 +02:00
Austin Songer	fa5554660c	Update sysmon_mal_cobaltstrike_re.yml	2021-09-04 17:33:05 -05:00
Pawel Mazur	caf78b5ea1	New Rule - Linux-Audio-Capture	2021-09-04 22:10:34 +02:00
frack113	2d9e09ecc3	Merge pull request #1991 from austinsonger/Azure-Rules ... Azure rules	2021-09-04 08:43:00 +02:00
Austin Songer	e7c5827776	Update azure_service_principal_removed.yml	2021-09-03 22:43:11 -05:00
Austin Songer	0612ea7f6e	Update azure_device_no_longer_managed_or_compliant.yml	2021-09-03 22:42:26 -05:00
Austin Songer	c420a17e05	Update azure_service_principal_removed.yml	2021-09-03 22:29:21 -05:00
Austin Songer	fda1e3362e	Update azure_owner_removed_from_application_or_service_principal.yml	2021-09-03 22:29:12 -05:00
Austin Songer	9d26116d27	Update azure_device_no_longer_managed_or_compliant.yml	2021-09-03 22:29:02 -05:00
Austin Songer	8fe7bfc452	Update azure_application_deleted.yml	2021-09-03 22:28:53 -05:00
Austin Songer	c021ae9e7c	Update and rename azure_device_or_configuration_deleted.yml to azure_device_or_configuration_modified_or_deleted.yml	2021-09-03 22:28:35 -05:00
Austin Songer	6744fb7f2e	Create azure_application_deleted.yml	2021-09-03 22:25:34 -05:00
Austin Songer	70ac0104cf	Create azure_service_principal_removed.yml	2021-09-03 22:25:01 -05:00
Austin Songer	6e15618c75	Create azure_device_or_configuration_deleted.yml	2021-09-03 22:24:32 -05:00
Austin Songer	b478132769	Create azure_owner_removed_from_application_or_service_principal.yml	2021-09-03 22:23:59 -05:00
Austin Songer	c0bdc3fb1b	Create azure_device_no_longer_managed_or_compliant.yml	2021-09-03 22:23:21 -05:00
frack113	6780182c37	Merge pull request #1974 from frack113/tags_pack2 ... Add missing Tags	2021-09-03 19:13:32 +02:00
frack113	2e474628fa	Merge pull request #1987 from zakibro/master ... New Rule - Linux-Auditd-System Information Discovery	2021-09-03 19:10:28 +02:00
frack113	688df3405a	Merge pull request #1970 from frack113/red_T1564.004_1 ... Redcanary t1564.004 ADS test 1	2021-09-03 19:06:51 +02:00
frack113	77c6b74c72	Merge pull request #1985 from mvelazc0/master ... Adding Petitpotam/ADCS attack vector detections	2021-09-03 19:06:03 +02:00
mvelazco	a7a002cb7f	updating fields as per frack113 feedback	2021-09-03 10:01:54 -04:00
frack113	6d1ab0a4c6	Merge pull request #1990 from phantinuss/pr2 ... Additional UAC Bypasses (2)	2021-09-03 14:00:51 +02:00
frack113	769451dc03	Add missing id	2021-09-03 13:42:15 +02:00
frack113	815134df7f	Cleanup	2021-09-03 13:30:10 +02:00
phantinuss	aa2e86963c	fix: rename filter	2021-09-03 13:26:34 +02:00
phantinuss	f3bdb0e43d	fix: remove unneeded selection	2021-09-03 13:26:23 +02:00
phantinuss	2de2de8433	Addition to UAC Bypasses	2021-09-03 13:26:11 +02:00