Commits

Branch selector

 master

User selector

All users

All time

Commit History

Commits on Jan 1, 2019

• Merge pull request #215 from TareqAlKhatib/ole_vs_rc

  Show description for 55f8993
  Neo23x0

  authored
  55f8993

  Copy full SHA for 55f8993

• Fixed the RC section to use rc.exe instead of oleview.exe

  TareqAlKhatib

  committed
  0a5e79b

  Copy full SHA for 0a5e79b

Commits on Dec 28, 2018

• Merge pull request #214 from TareqAlKhatib/reference_vs_references

  Show description for 4e21289
  Neo23x0

  authored
  4e21289

  Copy full SHA for 4e21289

Commits on Dec 25, 2018

• Corrected reference to references as per Sigma's standard

  TareqAlKhatib

  committed
  f318f32

  Copy full SHA for f318f32

Commits on Dec 21, 2018

• Added Python 3.7 to CI testing

  thomaspatzke

  committed
  f7e5392

  Copy full SHA for f7e5392

• Fixed wildcard issue for es-dsl backend

  Show description for 73b0c3a
  thomaspatzke

  committed
  73b0c3a

  Copy full SHA for 73b0c3a

Commits on Dec 19, 2018

• Rule: Hacktool Rubeus

  

  Florian Roth

  committed
  c8c419f

  Copy full SHA for c8c419f

Commits on Dec 18, 2018

• Merge pull request #211 from Cyb3rWard0g/master

  Show description for 75c7d65
  thomaspatzke

  authored
  75c7d65

  Copy full SHA for 75c7d65

• Fixed wildcard issue in es-qs backend and depending

  Show description for ffd4382
  thomaspatzke

  committed
  ffd4382

  Copy full SHA for ffd4382

Commits on Dec 17, 2018

• Rule: proxy user agents updated with MacControl user agent

  

  Florian Roth

  committed
  a7fa205

  Copy full SHA for a7fa205

• Rule: false positive reduction in rule

  

  Florian Roth

  committed
  99f773d

  Copy full SHA for 99f773d

Commits on Dec 12, 2018

• Rule: updated ATT&CK tags in MavInject rule

  

  Florian Roth

  committed
  172236e

  Copy full SHA for 172236e

• Rule: docs: reference update in MavInject rule

  

  Florian Roth

  committed
  188d3a8

  Copy full SHA for 188d3a8

• Merge pull request #212 from Neo23x0/commandline-issue

  Show description for 6206692
  Neo23x0

  authored
  6206692

  Copy full SHA for 6206692

• Rule: MavInject process injection

  

  Florian Roth

  committed
  49eb03c

  Copy full SHA for 49eb03c

Commits on Dec 11, 2018

• Bugfix: wrong field for 4688 process creation events

  

  Florian Roth

  committed
  b0cb0ab

  Copy full SHA for b0cb0ab

• Removed overlapping rule with sysmon_office_shell.yml

  

  Florian Roth

  committed
  b5d7883

  Copy full SHA for b5d7883

• Field-Index Mapping File & SIGMA Rules Field names fix

  Show description for a0486ed
  Cyb3rWard0g

  committed
  a0486ed

  Copy full SHA for a0486ed

Commits on Dec 10, 2018

• Merge branch 'juju4-devel-sumo'

  thomaspatzke

  committed
  6886643

  Copy full SHA for 6886643

• Fixed config and added index field

  Show description for 4175d0c
  thomaspatzke

  committed
  4175d0c

  Copy full SHA for 4175d0c

• Added CI testing for SumoLogic backend

  thomaspatzke

  committed
  b520897

  Copy full SHA for b520897

• Merge pull request #208 from Cyb3rWard0g/master

  Show description for 4e3f6c3
  thomaspatzke

  authored
  4e3f6c3

  Copy full SHA for 4e3f6c3

• Merge remote-tracking branch 'upstream/master'

  Cyb3rWard0g

  committed
  93d1d70

  Copy full SHA for 93d1d70

Commits on Dec 9, 2018

• Adding Sumologic backend

  juju4

  committed
  1f707cb

  Copy full SHA for 1f707cb

• Fixed ElastAlert *_key options

  Show description for 2091c90
  thomaspatzke

  committed
  2091c90

  Copy full SHA for 2091c90

• Merge remote-tracking branch 'upstream/master'

  Cyb3rWard0g

  committed
  9567ce5

  Copy full SHA for 9567ce5

Commits on Dec 8, 2018

• Improve Rule & Updated HELK SIGMA Standardization Config

  Show description for 8c577a3
  Cyb3rWard0g

  committed
  8c577a3

  Copy full SHA for 8c577a3

Commits on Dec 6, 2018

• Update win_disable_event_logging.yml

  Show description for a35f945
  Cyb3rWard0g

  committed
  a35f945

  Copy full SHA for a35f945

Commits on Dec 5, 2018

• fix: fixed author string (cannot be list according to sigma specs)

  Neo23x0

  committed
  2e5a739

  Copy full SHA for 2e5a739

• fix: fixed author string (cannot be list according to sigma specs)

  Neo23x0

  committed
  9b15b64

  Copy full SHA for 9b15b64

• Merge pull request #204 from Cyb3rWard0g/master

  Show description for abc941b
  thomaspatzke

  authored
  abc941b

  Copy full SHA for abc941b

• Revert "Fixed wildcards in es-qs backend"

  Show description for 246ad7c
  thomaspatzke

  committed
  246ad7c

  Copy full SHA for 246ad7c

• Update sysmon_plugx_susp_exe_locations.yml

  Show description for 87ce070
  Cyb3rWard0g

  committed
  87ce070

  Copy full SHA for 87ce070

• Update av_relevant_files.yml

  Show description for bff7ec5
  Cyb3rWard0g

  committed
  bff7ec5

  Copy full SHA for bff7ec5

• Update win_susp_commands_recon_activity.yml

  Show description for 104ee6c
  Cyb3rWard0g

  committed
  104ee6c

  Copy full SHA for 104ee6c