5733 Commits

Author	SHA1	Message	Date
frack113	deb0ddfe09	fix duplicate tags	2021-09-08 20:16:53 +02:00
frack113	af8bf06b30	add missing tags	2021-09-08 20:14:49 +02:00
Florian Roth	72ffe99b20	Merge pull request #2001 from SigmaHQ/rule-devel ... filter: empty thumbprint, PetitPotam rule	2021-09-08 09:09:58 +02:00
frack113	993112c7eb	Merge pull request #2002 from frack113/missing_tag ... Add missing Tags #1974	2021-09-08 06:26:55 +02:00
frack113	e712d9696b	Merge pull request #2000 from frack113/split_global ... Split frack113 global rules	2021-09-08 06:26:35 +02:00
Thomas Patzke	d9edc9f0e3	Merge branch 'fix'	2021-09-08 00:19:09 +02:00
Thomas Patzke	143744bc12	Various fixes ... * Backslashes in regular expressions * Casing of condition operators * Further small errors	2021-09-07 23:38:07 +02:00
frack113	4c3f8821c4	add missing tags	2021-09-07 18:16:46 +02:00
frack113	4e394d83a1	add missing tags	2021-09-07 17:45:41 +02:00
Rachel Rice	be5351947c	Unset date update ... Signed-off-by: Rachel Rice <rachel.rice@lacework.net>	2021-09-07 16:36:59 +01:00
Florian Roth	1a55f4a294	filter: empty thumbprint, PetitPotam rule	2021-09-07 14:37:03 +02:00
Rachel Rice	eef6e71e2e	Update AWS Update Login Profile Rule fields ... Missed updating field from `responseElements.accessKey.userName` to `requestParameters.userName` on last update.	2021-09-07 12:39:56 +01:00
frack113	0e5e4fa19d	Split global rules	2021-09-07 13:30:32 +02:00
Florian Roth	cfbde22d2d	rule: PRIVATELOG image load	2021-09-07 10:10:14 +02:00
Florian Roth	3a305e82b9	fix: remove renamed files	2021-09-07 09:28:20 +02:00
Florian Roth	a8d8d878a0	remove uppercase files	2021-09-07 09:27:11 +02:00
Florian Roth	8b4fce3473	removed unneeded upper ticks	2021-09-07 09:21:44 +02:00
Florian Roth	c082ce0fe0	Merge branch 'master' into rule-devel	2021-09-07 09:20:47 +02:00
Florian Roth	57bfdc7a02	fix: more upper case chars	2021-09-07 09:19:23 +02:00
Florian Roth	0cce1c0245	fix: missing lowercase chars	2021-09-07 09:17:25 +02:00
Florian Roth	33be089ea2	fix: filename to lowercase	2021-09-07 09:16:35 +02:00
frack113	4f6b87fed5	Merge pull request #1997 from zakibro/master ... New Rule - Linux Hidden Files and Directories	2021-09-07 09:12:04 +02:00
zakibro	bba66ca762	Update lnx_auditd_hidden_files_directories.yml ... Updating arguments section	2021-09-07 07:57:50 +02:00
zakibro	e9fa5bde2b	Update lnx_auditd_hidden_files_directories.yml ... Correction of tag	2021-09-06 18:55:58 +02:00
Pawel Mazur	7c2895c73f	New Rule - Linux Hidden Files and Directories	2021-09-06 18:43:49 +02:00
Pawel Mazur	59eb7ce032	Merge branch 'master' of https://github.com/zakibro/sigma	2021-09-06 18:41:19 +02:00
Pawel Mazur	9f5f25e480	New Rule - Linux Hidden Files and Directories	2021-09-06 18:40:39 +02:00
zakibro	f52860d6ab	Merge branch 'SigmaHQ:master' into master	2021-09-06 18:40:02 +02:00
Pawel Mazur	3eb354e34c	Merge branch 'master' of https://github.com/zakibro/sigma	2021-09-06 18:37:45 +02:00
Pawel Mazur	ef3efd8fd3	New Rule Linux - Hidden Files and Directories	2021-09-06 18:37:02 +02:00
Austin Songer	0de95e355a	Update azure_federation_modified.yml	2021-09-06 11:31:52 -05:00
Austin Songer	e6e3fc2eec	Update azure_federation_modified.yml	2021-09-06 11:16:35 -05:00
Austin Songer	6025df63ee	Create azure_federation_modified.yml	2021-09-06 11:06:58 -05:00
Florian Roth	6b2bacd2cc	Merge pull request #1979 from frack113/test_global ... Change ID in global action rule	2021-09-06 08:44:14 +02:00
frack113	013eb2e11f	Merge pull request #1993 from zakibro/master ... New Rule - Linux-Audio-Capture	2021-09-05 18:30:45 +02:00
frack113	44a5792be3	Revert win_apt_apt29_tor.yml	2021-09-05 12:34:24 +02:00
frack113	ca4c156fa4	Update win_apt_apt29_tor.yml	2021-09-05 11:20:57 +02:00
frack113	acf2bfbd27	Update sigma_uuid verify ... Make a better verify code	2021-09-05 10:43:42 +02:00
zakibro	5042ba65ac	Update lnx_auditd_audio_capture.yml ... Added more references about arecord.	2021-09-05 09:28:53 +02:00
Austin Songer	fa5554660c	Update sysmon_mal_cobaltstrike_re.yml	2021-09-04 17:33:05 -05:00
Pawel Mazur	caf78b5ea1	New Rule - Linux-Audio-Capture	2021-09-04 22:10:34 +02:00
Austin Songer	e7c5827776	Update azure_service_principal_removed.yml	2021-09-03 22:43:11 -05:00
Austin Songer	0612ea7f6e	Update azure_device_no_longer_managed_or_compliant.yml	2021-09-03 22:42:26 -05:00
Austin Songer	c420a17e05	Update azure_service_principal_removed.yml	2021-09-03 22:29:21 -05:00
Austin Songer	fda1e3362e	Update azure_owner_removed_from_application_or_service_principal.yml	2021-09-03 22:29:12 -05:00
Austin Songer	9d26116d27	Update azure_device_no_longer_managed_or_compliant.yml	2021-09-03 22:29:02 -05:00
Austin Songer	8fe7bfc452	Update azure_application_deleted.yml	2021-09-03 22:28:53 -05:00
Austin Songer	c021ae9e7c	Update and rename azure_device_or_configuration_deleted.yml to azure_device_or_configuration_modified_or_deleted.yml	2021-09-03 22:28:35 -05:00
Austin Songer	6744fb7f2e	Create azure_application_deleted.yml	2021-09-03 22:25:34 -05:00
Austin Songer	70ac0104cf	Create azure_service_principal_removed.yml	2021-09-03 22:25:01 -05:00