 frack113
|
6bce0f967a
|
Merge pull request #2079 from zakibro/master
New Rule - Linux - Auditd - Clipboard Collection
|
2021-09-27 08:34:30 +02:00 |
|
|
zakibro
|
6a2785492d
|
Update lnx_auditd_clipboard_collection.yml
Changes after suggestion.
|
2021-09-27 07:59:43 +02:00 |
|
|
Florian Roth
|
f196e3174d
|
refactor: moved last global rule to unsupported
|
2021-09-26 10:54:11 +02:00 |
|
|
Florian Roth
|
93bff7f49d
|
docs: new ID
|
2021-09-25 11:37:39 +02:00 |
|
|
Florian Roth
|
31ef53738d
|
refactor: removed old Joomla rules, made generic path traversal
|
2021-09-25 11:37:02 +02:00 |
|
|
frack113
|
7dc574bc01
|
Merge pull request #2078 from kidrek/win_process_dump_rdrleakdiag
add new rule win_process_dump_rdrleakdiag
|
2021-09-25 07:55:52 +02:00 |
|
|
frack113
|
8fe222a92c
|
Merge pull request #2077 from frack113/remove_re
Convert re to endswith
|
2021-09-25 07:55:22 +02:00 |
|
|
Sittikorn S
|
7c8df0eb55
|
Update web_cve_2021_22005_vmware_file_upload.yml
|
2021-09-25 08:05:00 +07:00 |
|
|
kidrek
|
267da51745
|
The issues have been fixed
|
2021-09-24 22:18:00 +02:00 |
|
|
Pawel Mazur
|
4bbe4962b0
|
New Rule - Linux - Auditd - Clipboard Collection
|
2021-09-24 18:40:10 +02:00 |
|
|
kidrek
|
ecd4719a20
|
add new rule win_process_dump_rdrleakdiag
|
2021-09-24 18:22:06 +02:00 |
|
|
Sittikorn S
|
dea89ad324
|
Update and rename web_cve_2021_22005_vmware_file_upload to web_cve_2021_22005_vmware_file_upload.yml
|
2021-09-24 21:35:04 +07:00 |
|
|
Sittikorn S
|
f903640b73
|
Update web_cve_2021_22005_vmware_file_upload
|
2021-09-24 21:29:43 +07:00 |
|
|
Sittikorn S
|
16452ca80e
|
Create web_cve_2021_22005_vmware_file_upload
|
2021-09-24 21:21:09 +07:00 |
|
|
frack113
|
ef75695647
|
convert re to endswith
|
2021-09-24 15:39:56 +02:00 |
|
|
frack113
|
aa96f21d0f
|
fix filename
|
2021-09-23 14:52:56 +02:00 |
|
|
frack113
|
934e391159
|
fix filename
|
2021-09-23 14:51:59 +02:00 |
|
|
frack113
|
44feb3ddf6
|
fix filename
|
2021-09-23 14:46:13 +02:00 |
|
|
frack113
|
89776b8c14
|
fix filename
|
2021-09-23 14:44:51 +02:00 |
|
|
frack113
|
8b5f62bdb7
|
fix filename
|
2021-09-23 14:41:16 +02:00 |
|
|
frack113
|
c029e62c64
|
fix filename
|
2021-09-23 14:37:34 +02:00 |
|
|
Florian Roth
|
bb2e6acd40
|
Merge pull request #1926 from pbssubhash/master
Adding CVE's Exploitation attempt detection: Year - 2010
|
2021-09-23 14:08:15 +02:00 |
|
|
frack113
|
e9260679d4
|
Merge pull request #2064 from SigmaHQ/rule-devel
Changed tags in lnx_clear_syslog.yml
|
2021-09-23 13:55:18 +02:00 |
|
|
frack113
|
c59b0eb543
|
Merge pull request #2063 from frack113/last_global
Split Last Global Rules
|
2021-09-23 13:54:57 +02:00 |
|
|
Florian Roth
|
3107ede1c4
|
Merge branch 'pr/2065'
|
2021-09-23 09:18:15 +02:00 |
|
|
frack113
|
688903192d
|
Merge branch 'fix_filename_test' of https://github.com/frack113/sigma into fix_filename_test
|
2021-09-23 08:01:19 +02:00 |
|
|
frack113
|
605fa2dd80
|
update filename
|
2021-09-23 07:58:50 +02:00 |
|
|
frack113
|
cce90a669a
|
Merge pull request #2067 from austinsonger/aws_suspicious_saml_activity.yml
aws_suspicious_saml_activity.yml
|
2021-09-23 06:34:18 +02:00 |
|
|
frack113
|
525a310c86
|
Merge pull request #2068 from austinsonger/typos
Typos
|
2021-09-23 06:32:49 +02:00 |
|
|
Austin Songer
|
53f426342c
|
Update win_file_winword_cve_2021_40444.yml
|
2021-09-22 22:26:05 -05:00 |
|
|
Austin Songer
|
ab613af365
|
Update sysmon_atlassian_confluence_cve_2021_26084_exploit.yml
|
2021-09-22 22:24:24 -05:00 |
|
|
Austin Songer
|
6942b9c5e8
|
Update aws_suspicious_saml_activity.yml
|
2021-09-22 20:16:50 -05:00 |
|
|
Austin Songer
|
d1337bbfbf
|
Create aws_suspicious_saml_activity.yml
|
2021-09-22 20:15:36 -05:00 |
|
|
Austin Songer
|
097c6c3537
|
Update okta_user_account_locked_out.yml
|
2021-09-22 19:54:46 -05:00 |
|
|
Austin Songer
|
05d454d794
|
Update okta_unauthorized_access_to_app.yml
|
2021-09-22 19:54:39 -05:00 |
|
|
Austin Songer
|
26b99a44c0
|
Update okta_security_threat_detected.yml
|
2021-09-22 19:54:32 -05:00 |
|
|
Austin Songer
|
f55b9ef024
|
Update okta_policy_rule_modified_or_deleted.yml
|
2021-09-22 19:54:23 -05:00 |
|
|
Austin Songer
|
100eb06e7a
|
Update okta_policy_modified_or_deleted.yml
|
2021-09-22 19:54:15 -05:00 |
|
|
Austin Songer
|
9d910d823a
|
Update okta_network_zone_deactivated_or_deleted.yml
|
2021-09-22 19:54:09 -05:00 |
|
|
Austin Songer
|
ea73c692d7
|
Update okta_mfa_reset_or_deactivated.yml
|
2021-09-22 19:54:02 -05:00 |
|
|
Austin Songer
|
f673eb413e
|
Update okta_application_sign-on_policy_modified_or_deleted.yml
|
2021-09-22 19:53:56 -05:00 |
|
|
Austin Songer
|
1effd8b187
|
Update okta_application_modified_or_deleted.yml
|
2021-09-22 19:53:49 -05:00 |
|
|
Austin Songer
|
ccd9f8d6dc
|
Update okta_api_token_revoked.yml
|
2021-09-22 19:53:43 -05:00 |
|
|
Austin Songer
|
6401f9b4d9
|
Update okta_api_token_created.yml
|
2021-09-22 19:53:36 -05:00 |
|
|
Austin Songer
|
ecb18ec149
|
Update okta_admin_role_assigned_to_user_or_group.yml
|
2021-09-22 19:53:28 -05:00 |
|
|
Austin Songer
|
74452347fb
|
Update okta_user_account_locked_out.yml
|
2021-09-22 19:52:43 -05:00 |
|
|
Austin Songer
|
275ebf7884
|
Update okta_unauthorized_access_to_app.yml
|
2021-09-22 19:52:36 -05:00 |
|
|
Austin Songer
|
2ab5ba0a0c
|
Update okta_security_threat_detected.yml
|
2021-09-22 19:52:29 -05:00 |
|
|
Austin Songer
|
1aec430291
|
Update okta_policy_rule_modified_or_deleted.yml
|
2021-09-22 19:52:23 -05:00 |
|
|
Austin Songer
|
cead26637b
|
Update okta_policy_modified_or_deleted.yml
|
2021-09-22 19:52:17 -05:00 |
|