blue-team-tools

Merge PR #5898 from @FlorianBracq - Set groups in regular expressions as non capturing

sigma-validation.yml #45:Commit 0e3b749e0d pushed by adam

r2026-04-01

2026-05-08 23:31:44 +01:00

0s

Merge PR #5898 from @FlorianBracq - Set groups in regular expressions as non capturing

sigma-test.yml #44:Commit 0e3b749e0d pushed by adam

r2026-04-01

2026-05-08 23:31:43 +01:00

0s

Merge PR #5898 from @FlorianBracq - Set groups in regular expressions as non capturing

release.yml #43:Commit 0e3b749e0d pushed by adam

r2026-04-01

2026-05-08 23:31:43 +01:00

0s

Merge PR #5898 from @FlorianBracq - Set groups in regular expressions as non capturing

regression-tests.yml #42:Commit 0e3b749e0d pushed by adam

r2026-04-01

2026-05-08 23:31:43 +01:00

0s

Merge PR #5898 from @FlorianBracq - Set groups in regular expressions as non capturing

goodlog-tests.yml #41:Commit 0e3b749e0d pushed by adam

r2026-04-01

2026-05-08 23:31:43 +01:00

0s

Merge PR #5814 from @swachchhanda000 - Add New Credential Guard Tampering Rules

sigma-validation.yml #40:Commit 478120e7d2 pushed by adam

r2026-01-01

2026-05-08 23:31:43 +01:00

0s

Merge PR #5814 from @swachchhanda000 - Add New Credential Guard Tampering Rules

sigma-test.yml #39:Commit 478120e7d2 pushed by adam

r2026-01-01

2026-05-08 23:31:43 +01:00

0s

Merge PR #5814 from @swachchhanda000 - Add New Credential Guard Tampering Rules

release.yml #38:Commit 478120e7d2 pushed by adam

r2026-01-01

2026-05-08 23:31:43 +01:00

0s

Merge PR #5814 from @swachchhanda000 - Add New Credential Guard Tampering Rules

regression-tests.yml #37:Commit 478120e7d2 pushed by adam

r2026-01-01

2026-05-08 23:31:43 +01:00

0s

Merge PR #5814 from @swachchhanda000 - Add New Credential Guard Tampering Rules

goodlog-tests.yml #36:Commit 478120e7d2 pushed by adam

r2026-01-01

2026-05-08 23:31:43 +01:00

0s

Merge PR #5536 from @suKTech24 - Add AWS GuardDuty Detector Deleted Or Updated

sigma-validation.yml #35:Commit 3565dee3eb pushed by adam

r2025-12-01

2026-05-08 23:31:43 +01:00

0s

Merge PR #5536 from @suKTech24 - Add AWS GuardDuty Detector Deleted Or Updated

sigma-test.yml #34:Commit 3565dee3eb pushed by adam

r2025-12-01

2026-05-08 23:31:42 +01:00

0s

Merge PR #5536 from @suKTech24 - Add AWS GuardDuty Detector Deleted Or Updated

release.yml #33:Commit 3565dee3eb pushed by adam

r2025-12-01

2026-05-08 23:31:42 +01:00

0s

Merge PR #5536 from @suKTech24 - Add AWS GuardDuty Detector Deleted Or Updated

regression-tests.yml #32:Commit 3565dee3eb pushed by adam

r2025-12-01

2026-05-08 23:31:42 +01:00

0s

Merge PR #5536 from @suKTech24 - Add AWS GuardDuty Detector Deleted Or Updated

goodlog-tests.yml #31:Commit 3565dee3eb pushed by adam

r2025-12-01

2026-05-08 23:31:42 +01:00

0s

Merge PR #5708 from @nasbench - Multiple updates and issue fixes

sigma-validation.yml #30:Commit a77d3bae4b pushed by adam

r2025-11-01

2026-05-08 23:31:42 +01:00

0s

Merge PR #5708 from @nasbench - Multiple updates and issue fixes

sigma-test.yml #29:Commit a77d3bae4b pushed by adam

r2025-11-01

2026-05-08 23:31:42 +01:00

0s

Merge PR #5708 from @nasbench - Multiple updates and issue fixes

release.yml #28:Commit a77d3bae4b pushed by adam

r2025-11-01

2026-05-08 23:31:42 +01:00

0s

Merge PR #5708 from @nasbench - Multiple updates and issue fixes

goodlog-tests.yml #27:Commit a77d3bae4b pushed by adam

r2025-11-01

2026-05-08 23:31:42 +01:00

0s

Merge PR #5183 from @swachchhanda000 - add rules for malware abusing grimresource and RTLO techniques

release.yml #26:Commit d27d120401 pushed by adam

r2025-10-01

2026-05-08 23:31:42 +01:00

0s

Merge PR #5492 from @swachchhanda000 - Kerberos Coercion Via DNS SPN Spoofing

release.yml #25:Commit a55bc212ad pushed by adam

r2025-07-08

2026-05-08 23:31:41 +01:00

0s

Merge PR #5385 from @CheraghiMilad - Added new tool for recording audio - ecasound

release.yml #24:Commit 304b019212 pushed by adam

r2025-05-21

2026-05-08 23:31:41 +01:00

0s

Merge PR #5177 from @nasbench - promote older rules status from experimental to test

release.yml #23:Commit 2bfb0935a0 pushed by adam

r2025-02-03

2026-05-08 23:31:41 +01:00

0s

Merge PR #5132 from @Neo23x0 - Update DNS Query To Remote Access Software Domain From Non-Browser App

release.yml #22:Commit e8a6894eca pushed by adam

r2024-12-19

2026-05-08 23:31:41 +01:00

0s

Merge PR #5042 from @wieso-itzi - Update Python PTY rules

release.yml #21:Commit 4f4ef7a8cc pushed by adam

r2024-11-10

2026-05-08 23:31:41 +01:00

0s

Merge PR #4983 from @swachchhanda000 - Add Task Scheduler DLL Loaded By Application Located In Potentially Suspicious Location

release.yml #20:Commit 7f0f7eefe0 pushed by adam

r2024-09-02

2026-05-08 23:31:41 +01:00

0s

Merge branch 'SigmaHQ:master' into master

release.yml #19:Commit af9ffdb2fd pushed by adam

r2024-07-17

2026-05-08 23:31:41 +01:00

0s

Merge PR #4853 from @nasbench - Add some cosmetic changes and small updates

release.yml #18:Commit ed789f54ce pushed by adam

r2024-05-13

2026-05-08 23:31:41 +01:00

0s

Merge PR #4834 from @CertainlyP - Add Outbound Network Connection Initiated By Microsoft Dialer

release.yml #17:Commit 39db80478e pushed by adam

r2024-04-29

2026-05-08 23:31:41 +01:00

0s

Merge PR #4774 from @nasbench - Fix and update multiple rules

release.yml #16:Commit f0395b815b pushed by adam

r2024-03-26

2026-05-08 23:31:41 +01:00

0s