david-syk
3eaaa050b7
Merge PR #5452 from @david-syk - Update the MITRE ATT&CK tags for multiple rules
...
chore: update the MITRE ATT&CK tags for multiple rules
2025-06-04 14:39:25 +02:00
frack113
74fc1c74ec
Merge PR #5451 from @frack113 - chore: cleanup metadata
...
chore: 🧹 Remove redundant modified field
chore: 🧹 Use Mitre tags instead of url
chore: 🧹 Use permalink for github file reference
chore: 🧹 Order emerging-threats Exploits rules
2025-06-04 13:33:36 +02:00
david-syk
95b6dd8573
Merge PR #5381 from @david-syk - Update MITRE ATT&CK tags
...
chore: update multiple mitre att&ck tags
2025-04-25 20:55:51 +02:00
Nasreddine Bencherchali
598d29f811
Merge PR #4950 from @nasbench - Comply With v2 Spec Changes
...
chore: change tags, date, modified fields to comply with v2 of the Sigma spec.
chore: update the related type from `obsoletes` to `obsolete`.
chore: update local json schema to the latest version.
2024-08-12 12:02:50 +02:00
Ryan Plas
1d40f1d20b
Merge PR #4893 from @ryanplasma - Update Microsoft references URLS
...
chore: update Microsoft references link to use the "learn" subdomain instead of "docs".
---------
Co-authored-by: nasbench <8741929+nasbench@users.noreply.github.com >
Thanks: @ryanplasma
2024-07-02 12:00:11 +02:00
frack113
020fc8061f
Merge PR #4479 From @frack113 - Upgrade Rules Status
...
chore: Upgrade status level from `experimental` to `test` for rules that have not changed in 300 days
---------
Signed-off-by: frack113 <62423083+frack113@users.noreply.github.com >
Co-authored-by: nasbench <8741929+nasbench@users.noreply.github.com >
2023-10-17 14:35:26 +02:00
Ryan Plas
563f5ce090
Fix Zero Networks Blog 404s
2023-06-22 17:16:46 -04:00
Tess
107629758d
remove duplicate reference urls
2023-04-18 11:03:07 -04:00
frack113
1033b3f404
change status to test
2023-01-27 06:48:34 +01:00
frack113
cb67871bd2
Revert "Change status of old rules"
2023-01-26 19:37:18 +01:00
frack113
5323fd4baa
Change status of old rules
2023-01-25 18:41:18 +01:00
Nasreddine Bencherchali
15757c2b7d
fix: remove tactic links
2023-01-10 19:20:31 +01:00
frack113
486ee8f435
Apply suggestions from code review
...
Co-authored-by: Nasreddine Bencherchali <8741929+nasbench@users.noreply.github.com >
2023-01-10 19:13:38 +01:00
frack113
4023bf2c83
Remove mitre url
2023-01-10 18:09:04 +01:00
Florian Roth
18a44625fc
Merge pull request #3702 from nasbench/nasbench-rule-devel
...
fix: fix issues and deprecate rule
2022-11-17 14:49:43 +01:00
Nasreddine Bencherchali
ef91852c44
fix: update modified date
2022-11-17 10:15:58 +01:00
Nasreddine Bencherchali
b03ccf6844
fix: fix #3699
2022-11-16 23:41:16 +01:00
Florian Roth
eefa2da8b4
Merge pull request #3700 from jstnk9/master
...
Update rpc_firewall_eventlog_recon.yml
2022-11-16 08:55:49 +01:00
jstnk9
9ec8d40b42
Update rpc_firewall_eventlog_recon.yml
...
removed duplicated ref
2022-11-15 21:58:53 +01:00
frack113
7b55972146
Order yaml field
2022-10-25 06:48:55 +02:00
Nasreddine Bencherchali
62574e9b0c
Update Ref+Selection 3
2022-07-11 18:12:51 +01:00
phantinuss
043747822f
fix: more falsepositives harmonization
2022-03-16 14:57:06 +01:00
phantinuss
b23eee6ebf
fix: unknown --> Unknown
2022-03-16 13:43:54 +01:00
sagiezero
83afc12875
fix(rules): changed "product" and "service" to suggested values.
2022-01-23 09:44:24 +02:00
sagiezero
929711f5c1
fix(rules): missed stuff from previous fix
2022-01-20 17:27:47 +02:00
sagiezero
eb5578fa33
fix(rules): fixed capital in rule names, removed unknown mitre tags, removed unknown tag in logsource.
2022-01-20 16:53:01 +02:00
sagiezero
c76443051a
feat(rules): changing location to "application" folder
2022-01-20 11:57:10 +02:00