blue-team-tools

Merge PR #5898 from @FlorianBracq - Set groups in regular expressions as non capturing

#43:Commit 0e3b749e0d pushed by adam

r2026-04-01

2026-05-08 23:31:43 +01:00

0s

Merge PR #5814 from @swachchhanda000 - Add New Credential Guard Tampering Rules

#38:Commit 478120e7d2 pushed by adam

r2026-01-01

2026-05-08 23:31:43 +01:00

0s

Merge PR #5536 from @suKTech24 - Add AWS GuardDuty Detector Deleted Or Updated

#33:Commit 3565dee3eb pushed by adam

r2025-12-01

2026-05-08 23:31:42 +01:00

0s

Merge PR #5708 from @nasbench - Multiple updates and issue fixes

#28:Commit a77d3bae4b pushed by adam

r2025-11-01

2026-05-08 23:31:42 +01:00

0s

Merge PR #5183 from @swachchhanda000 - add rules for malware abusing grimresource and RTLO techniques

#26:Commit d27d120401 pushed by adam

r2025-10-01

2026-05-08 23:31:42 +01:00

0s

Merge PR #5492 from @swachchhanda000 - Kerberos Coercion Via DNS SPN Spoofing

#25:Commit a55bc212ad pushed by adam

r2025-07-08

2026-05-08 23:31:41 +01:00

0s

Merge PR #5385 from @CheraghiMilad - Added new tool for recording audio - ecasound

#24:Commit 304b019212 pushed by adam

r2025-05-21

2026-05-08 23:31:41 +01:00

0s

Merge PR #5177 from @nasbench - promote older rules status from experimental to test

#23:Commit 2bfb0935a0 pushed by adam

r2025-02-03

2026-05-08 23:31:41 +01:00

0s

Merge PR #5132 from @Neo23x0 - Update DNS Query To Remote Access Software Domain From Non-Browser App

#22:Commit e8a6894eca pushed by adam

r2024-12-19

2026-05-08 23:31:41 +01:00

0s

Merge PR #5042 from @wieso-itzi - Update Python PTY rules

#21:Commit 4f4ef7a8cc pushed by adam

r2024-11-10

2026-05-08 23:31:41 +01:00

0s

Merge PR #4983 from @swachchhanda000 - Add Task Scheduler DLL Loaded By Application Located In Potentially Suspicious Location

#20:Commit 7f0f7eefe0 pushed by adam

r2024-09-02

2026-05-08 23:31:41 +01:00

0s

Merge branch 'SigmaHQ:master' into master

#19:Commit af9ffdb2fd pushed by adam

r2024-07-17

2026-05-08 23:31:41 +01:00

0s

Merge PR #4853 from @nasbench - Add some cosmetic changes and small updates

#18:Commit ed789f54ce pushed by adam

r2024-05-13

2026-05-08 23:31:41 +01:00

0s

Merge PR #4834 from @CertainlyP - Add Outbound Network Connection Initiated By Microsoft Dialer

#17:Commit 39db80478e pushed by adam

r2024-04-29

2026-05-08 23:31:41 +01:00

0s

Merge PR #4774 from @nasbench - Fix and update multiple rules

#16:Commit f0395b815b pushed by adam

r2024-03-26

2026-05-08 23:31:41 +01:00

0s

Merge PR #4762 from @nasbench - Fix false positives found in testing

#15:Commit 1758511a2e pushed by adam

r2024-03-11

2026-05-08 23:31:40 +01:00

0s

Merge PR #4734 from @clebron23 - Add new AWS rule related to GetSigninToken abuse

#14:Commit 6b8cd1f0f1 pushed by adam

r2024-02-26

2026-05-08 23:31:40 +01:00

0s

Merge PR #4698 from @swachchhanda000 - Added rules that detect possible activities associated with services and modules enumeration

#13:Commit 7509f6ab6b pushed by adam

r2024-02-12

2026-05-08 23:31:40 +01:00

0s

Merge PR #4681 from @nasbench - Add Missing Ref & Tags

#12:Commit be359ef3f2 pushed by adam

r2024-01-29

2026-05-08 23:31:40 +01:00

0s

Merge PR #4675 from @X-Junior - New Emerging Threat Rules For Peach Sandstorm APT

#11:Commit 3fb5392490 pushed by adam

r2024-01-15

2026-05-08 23:31:40 +01:00

0s

Merge PR #4577 from @nasbench - Multiple Fixes & Updates

#10:Commit e052677142 pushed by adam

r2023-12-21

2026-05-08 23:31:39 +01:00

0s

Merge PR #4529 from @swachchhanda000 - Add New Rules Related To WinPwn Execution

#9:Commit f07e2b37c0 pushed by adam

r2023-12-04

2026-05-08 23:31:39 +01:00

0s

Merge PR #4582 from @phantinuss - cleanup duplicate release entries and enhance manual thanking output

#8:Commit 01730d0e0e pushed by adam

r2023-11-20

2026-05-08 23:31:39 +01:00

0s

Merge PR #4522 from @X-Junior - updating multiple rules

#7:Commit e873392366 pushed by adam

r2023-11-06

2026-05-08 23:31:39 +01:00

0s

Merge PR #4500 From @phantinuss

#6:Commit 4852ee4648 pushed by adam

r2023-10-23

2026-05-08 23:31:39 +01:00

0s

Merge PR #4472 From @Tuutaans - New Registry Rule Related To HVCI

#5:Commit 889aae65a5 pushed by adam

r2023-10-09

2026-05-08 23:31:39 +01:00

0s