security-tools/blue-team-tools
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity
7,742 Commits 1 Branch 57 Tags
4bbe4962b01b5b2bffd02edf3659cd670dc9ddef
Commit Graph

7742 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Pawel Mazur 4bbe4962b0 New Rule - Linux - Auditd - Clipboard Collection 2021-09-24 18:40:10 +02:00
Pawel Mazur e20e5033e7 New Rule - Linux - Auditd - Screencapture with Import Tool 2021-09-21 18:55:48 +02:00
zakibro e47a7d9826 Update lnx_auditd_screencaputre_xwd.yml 2021-09-13 19:08:23 +02:00
Pawel Mazur a8f9617ccd New Rule - Linux - Auditd - Screen Capture with xwd 2021-09-13 18:56:33 +02:00
zakibro 6412ddaaee Update lnx_auditd_steghide_extract_steganography.yml 2021-09-11 11:19:21 +02:00
zakibro d0741f9f3a Update lnx_auditd_steghide_embed_steganography.yml 
Formatting and detection changes
 2021-09-11 11:18:08 +02:00
Pawel Mazur 89f15c01f9 New Linux Auditd Rules - Steghide Steganography 2021-09-11 10:56:17 +02:00
zakibro a4dffc14d4 Update lnx_auditd_unzip_hidden_zip_files_steganography.yml 
Fixing formatting
 2021-09-10 07:54:56 +02:00
zakibro 0b5e8cb980 Update lnx_auditd_hidden_zip_files_steganography.yml 
Formatting changes
 2021-09-10 07:52:35 +02:00
Pawel Mazur 5a5769cce6 New Rule - Linux - Steganography Unzip Hidden Information From Picture File 2021-09-09 20:38:25 +02:00
zakibro 3fbe5478c3 Update and rename lnx_auditd_hidden_files_steganography.yml to lnx_auditd_hidden_zip_files_steganography.yml 
Splitting the rule into separate rules
 2021-09-09 20:34:20 +02:00
zakibro 458973af81 Update lnx_auditd_hidden_files_steganography.yml 
Adding missing field: action
 2021-09-09 16:52:58 +02:00
zakibro 62db796fc2 Update lnx_auditd_hidden_files_steganography.yml 
Formatting changes
 2021-09-09 16:46:41 +02:00
zakibro 0971fe1d49 Update lnx_auditd_hidden_files_steganography.yml 
Fixing the listing issue
 2021-09-09 16:27:57 +02:00
Pawel Mazur 41458d8a5a New Rule - Linux Auditd Hidden Files - Steganography 2021-09-09 16:13:27 +02:00
zakibro bba66ca762 Update lnx_auditd_hidden_files_directories.yml 
Updating arguments section
 2021-09-07 07:57:50 +02:00
zakibro e9fa5bde2b Update lnx_auditd_hidden_files_directories.yml 
Correction of tag
 2021-09-06 18:55:58 +02:00
Pawel Mazur 7c2895c73f New Rule - Linux Hidden Files and Directories 2021-09-06 18:43:49 +02:00
Pawel Mazur 59eb7ce032 Merge branch 'master' of https://github.com/zakibro/sigma 2021-09-06 18:41:19 +02:00
Pawel Mazur 9f5f25e480 New Rule - Linux Hidden Files and Directories 2021-09-06 18:40:39 +02:00
zakibro f52860d6ab Merge branch 'SigmaHQ:master' into master 2021-09-06 18:40:02 +02:00
Pawel Mazur 3eb354e34c Merge branch 'master' of https://github.com/zakibro/sigma 2021-09-06 18:37:45 +02:00
Pawel Mazur ef3efd8fd3 New Rule Linux - Hidden Files and Directories 2021-09-06 18:37:02 +02:00
Florian Roth 6b2bacd2cc Merge pull request #1979 from frack113/test_global 
Change ID in global action rule
 2021-09-06 08:44:14 +02:00
frack113 013eb2e11f Merge pull request #1993 from zakibro/master 
New Rule - Linux-Audio-Capture
 2021-09-05 18:30:45 +02:00
frack113 4bfdbf5442 Merge branch 'test_global' of https://github.com/frack113/sigma into test_global 2021-09-05 17:51:11 +02:00
frack113 dc88ad7c73 fix sigma_uuid assign id 2021-09-05 17:50:54 +02:00
frack113 981d330d20 Merge branch 'test_global' of github.com:frack113/sigma into test_global 2021-09-05 12:37:52 +02:00
frack113 c82a652a34 Revert win_apt_apt29_tor.yml 2021-09-05 12:37:30 +02:00
frack113 44a5792be3 Revert win_apt_apt29_tor.yml 2021-09-05 12:34:24 +02:00
frack113 b0964250b1 Update win_apt_apt29_tor.yml 2021-09-05 12:23:45 +02:00
frack113 ca4c156fa4 Update win_apt_apt29_tor.yml 2021-09-05 11:20:57 +02:00
frack113 acf2bfbd27 Update sigma_uuid verify 
Make a better verify code
 2021-09-05 10:43:42 +02:00
zakibro 5042ba65ac Update lnx_auditd_audio_capture.yml 
Added more references about arecord.
 2021-09-05 09:28:53 +02:00
frack113 254b43f17f Merge pull request #1994 from austinsonger/sysmon_mal_cobaltstrike_re.yml 
Update sysmon_mal_cobaltstrike_re.yml
 2021-09-05 09:20:22 +02:00
Austin Songer fa5554660c Update sysmon_mal_cobaltstrike_re.yml 2021-09-04 17:33:05 -05:00
Pawel Mazur caf78b5ea1 New Rule - Linux-Audio-Capture 2021-09-04 22:10:34 +02:00
frack113 2d9e09ecc3 Merge pull request #1991 from austinsonger/Azure-Rules 
Azure rules
 2021-09-04 08:43:00 +02:00
Austin Songer e7c5827776 Update azure_service_principal_removed.yml 2021-09-03 22:43:11 -05:00
Austin Songer 0612ea7f6e Update azure_device_no_longer_managed_or_compliant.yml 2021-09-03 22:42:26 -05:00
Austin Songer c420a17e05 Update azure_service_principal_removed.yml 2021-09-03 22:29:21 -05:00
Austin Songer fda1e3362e Update azure_owner_removed_from_application_or_service_principal.yml 2021-09-03 22:29:12 -05:00
Austin Songer 9d26116d27 Update azure_device_no_longer_managed_or_compliant.yml 2021-09-03 22:29:02 -05:00
Austin Songer 8fe7bfc452 Update azure_application_deleted.yml 2021-09-03 22:28:53 -05:00
Austin Songer c021ae9e7c Update and rename azure_device_or_configuration_deleted.yml to azure_device_or_configuration_modified_or_deleted.yml 2021-09-03 22:28:35 -05:00
Austin Songer 6744fb7f2e Create azure_application_deleted.yml 2021-09-03 22:25:34 -05:00
Austin Songer 70ac0104cf Create azure_service_principal_removed.yml 2021-09-03 22:25:01 -05:00
Austin Songer 6e15618c75 Create azure_device_or_configuration_deleted.yml 2021-09-03 22:24:32 -05:00
Austin Songer b478132769 Create azure_owner_removed_from_application_or_service_principal.yml 2021-09-03 22:23:59 -05:00
Austin Songer c0bdc3fb1b Create azure_device_no_longer_managed_or_compliant.yml 2021-09-03 22:23:21 -05:00