SigmaHQ/rules/linux
2020-10-11 23:52:47 -05:00
..
auditd resolve conflicts with rule IDs; restored and deprecated sysmon_mimikatz_detection_lsass.yml 2019-11-19 02:11:19 +01:00
modsecurity Added UUIDs to rules 2019-11-12 23:12:27 +01:00
lnx_buffer_overflows.yml Added UUIDs to rules 2019-11-12 23:12:27 +01:00
lnx_chattr_immutable_removal.yml Update lnx_chattr_immutable_removal.yml 2019-12-02 02:54:32 +01:00
lnx_clamav.yml Added UUIDs to rules 2019-11-12 23:12:27 +01:00
lnx_dd_delete_file.yml Update lnx_dd_delete_file.yml 2019-12-02 02:54:48 +01:00
lnx_file_or_folder_permissions.yml Update lnx_file_or_folder_permissions.yml 2019-12-02 02:53:35 +01:00
lnx_pers_systemd_reload.yml Update lnx_pers_systemd_reload.yml 2019-12-02 02:54:13 +01:00
lnx_shell_clear_cmd_history.yml Added UUIDs to rules 2019-11-12 23:12:27 +01:00
lnx_shell_priv_esc_prep.yml Added UUIDs to rules 2019-11-12 23:12:27 +01:00
lnx_shell_susp_commands.yml Added UUIDs to rules 2019-11-12 23:12:27 +01:00
lnx_shell_susp_log_entries.yml Added UUIDs to rules 2019-11-12 23:12:27 +01:00
lnx_shell_susp_rev_shells.yml Added UUIDs to rules 2019-11-12 23:12:27 +01:00
lnx_shellshock.yml Added UUIDs to rules 2019-11-12 23:12:27 +01:00
lnx_ssh_cve_2018_15473.yml Added UUIDs to rules 2019-11-12 23:12:27 +01:00
lnx_sudo_cve_2019_14287.yml Added UUIDs to rules 2019-11-12 23:12:27 +01:00
lnx_susp_failed_logons_single_source.yml Added UUIDs to rules 2019-11-12 23:12:27 +01:00
lnx_susp_jexboss.yml Added UUIDs to rules 2019-11-12 23:12:27 +01:00
lnx_susp_named.yml Added UUIDs to rules 2019-11-12 23:12:27 +01:00
lnx_susp_ssh.yml Added UUIDs to rules 2019-11-12 23:12:27 +01:00
lnx_susp_vsftp.yml Added UUIDs to rules 2019-11-12 23:12:27 +01:00
lnx_system_net_disc_firewall_enum.yml Cleaning up falsepositives section of both rules 2020-10-11 23:52:47 -05:00
macos_system_net_disc_firewall_enum.yml Cleaning up falsepositives section of both rules 2020-10-11 23:52:47 -05:00