Commits

Branch selector

 0.16.0

User selector

All users

All time

Commit History

Commits on Feb 25, 2020

• Release 0.16.0

  thomaspatzke

  committed
  65444f7

  Copy full SHA for 65444f7

• Merge branch 'socprime-master'

  thomaspatzke

  committed
  4e42beb

  Copy full SHA for 4e42beb

• Merge pull request #624 from Antonlovesdnb/master

  Show description for a152853
  Neo23x0

  authored
  a152853

  Copy full SHA for a152853

• Update sysmon_susp_winword_vbadll_load.yml

  Antonlovesdnb

  authored
  e8b861b

  Copy full SHA for e8b861b

• Update sysmon_susp_office_kerberos_dll_load.yml

  Antonlovesdnb

  authored
  4c5d489

  Copy full SHA for 4c5d489

• Update sysmon_susp_office_dotnet_assembly_dll_load.yml

  Antonlovesdnb

  authored
  f92e2f2

  Copy full SHA for f92e2f2

• Update sysmon_susp_office_dsparse_dll_load.yml

  Antonlovesdnb

  authored
  8141b1a

  Copy full SHA for 8141b1a

• Update sysmon_susp_office_dotnet_gac_dll_load.yml

  Antonlovesdnb

  authored
  45e4a58

  Copy full SHA for 45e4a58

• Update sysmon_susp_office_dotnet_clr_dll_load.yml

  Antonlovesdnb

  authored
  c5b42ae

  Copy full SHA for c5b42ae

• Update sysmon_susp_office_dotnet_assembly_dll_load.yml

  Antonlovesdnb

  authored
  bb1eecf

  Copy full SHA for bb1eecf

• docs: more false positive conditions

  

  Florian Roth

  committed
  dd1a0e7

  Copy full SHA for dd1a0e7

• fix: changed titles to avoid duplicates

  

  Florian Roth

  committed
  950fa18

  Copy full SHA for 950fa18

• fix: lowered level due to false positives

  

  Florian Roth

  committed
  5d96f81

  Copy full SHA for 5d96f81

Commits on Feb 24, 2020

• Fixed ArcSight backend visibility

  thomaspatzke

  committed
  5a2ccbd

  Copy full SHA for 5a2ccbd

• Added/changed CI tests

  thomaspatzke

  committed
  6236429

  Copy full SHA for 6236429

• Added es-rule backend to all ES configurations

  thomaspatzke

  committed
  5b42135

  Copy full SHA for 5b42135

• Fixes in es-rule backend

  thomaspatzke

  committed
  d9b48ea

  Copy full SHA for d9b48ea

• Sorting of backend and configuration lists

  thomaspatzke

  committed
  4ee2c27

  Copy full SHA for 4ee2c27

• Merge branch 'changelog'

  thomaspatzke

  committed
  4ac6ddc

  Copy full SHA for 4ac6ddc

• Updated changelog

  thomaspatzke

  committed
  fa71723

  Copy full SHA for fa71723

• Carbonblack, Arcsight ESM, Elastic Rule

  saltar-ua

  committed
  5dc30bd

  Copy full SHA for 5dc30bd

• t

  saltar-ua

  committed
  516e61f

  Copy full SHA for 516e61f

• Merge pull request #633 from EccoTheFlintstone/fix_fp

  Show description for 91d1586
  Neo23x0

  authored
  91d1586

  Copy full SHA for 91d1586

• fix FP on rmdir matching dir

  

  ecco

  committed
  aa1eff5

  Copy full SHA for aa1eff5

• Merge pull request #632 from EccoTheFlintstone/fp_fix

  Show description for bfab143
  Neo23x0

  authored
  bfab143

  Copy full SHA for bfab143

• Merge pull request #631 from EccoTheFlintstone/ascii_fix

  Show description for 53ca71e
  Neo23x0

  authored
  53ca71e

  Copy full SHA for 53ca71e

• fix false positive on taskkill.exe not related to service stop at all

  

  ecco

  committed
  f807dae

  Copy full SHA for f807dae

• fix non ascii character in rule

  

  ecco

  committed
  1703b72

  Copy full SHA for 1703b72

Commits on Feb 21, 2020

• Merge branch 'sql-backend'

  thomaspatzke

  committed
  12be884

  Copy full SHA for 12be884

• Improved Splunk Zeek configuration

  thomaspatzke

  committed
  776b58b

  Copy full SHA for 776b58b

• Added CI test for sql backend

  thomaspatzke

  committed
  fa4c768

  Copy full SHA for fa4c768

• Merge branch 'patch-1' of https://github.com/fuseyjz/sigma into fuseyjz-patch-1

  thomaspatzke

  committed
  746f957

  Copy full SHA for 746f957

• Merge pull request #625 from ninoseki/fix-sigma2misp

  Show description for 3047571
  thomaspatzke

  authored
  3047571

  Copy full SHA for 3047571

Commits on Feb 20, 2020

• Fixed tagging

  thomaspatzke

  committed
  61d31c3

  Copy full SHA for 61d31c3

• Merge branch 'oscd'

  thomaspatzke

  committed
  48d95f0

  Copy full SHA for 48d95f0