5 Commits

Author	SHA1	Message	Date
Nasreddine Bencherchali	598d29f811	Merge PR #4950 from @nasbench - Comply With v2 Spec Changes ... chore: change tags, date, modified fields to comply with v2 of the Sigma spec. chore: update the related type from `obsoletes` to `obsolete`. chore: update local json schema to the latest version.	2024-08-12 12:02:50 +02:00
GtUGtHGtNDtEUaE	782f0f524e	Merge PR #4945 from @GtUGtHGtNDtEUaE - Fix typo in field name for rules leveraging EID 5145 ... fix: Remote Task Creation via ATSVC Named Pipe - Fixed field name from `Accesses` to `AccessList` fix: Persistence and Execution at Scale via GPO Scheduled Task - Fixed field name from `Accesses` to `AccessList` fix: Remote Service Activity via SVCCTL Named Pipe - Fixed field name from `Accesses` to `AccessList`	2024-08-01 22:46:23 +02:00
Fukusuke Takahashi	41dfd8ff0c	Merge PR #4940 from @fukusuket - Update unreachable references blog.menasec[.]net ... chore: Suspicious CLR Logs Creation chore: Remote Task Creation via ATSVC Named Pipe - Zeek chore: Possible Impacket SecretDump Remote Activity - Zeek chore: Suspicious PsExec Execution - Zeek chore: AD Privileged Users or Groups Reconnaissance chore: Remote Task Creation via ATSVC Named Pipe chore: Impacket PsExec Execution chore: Possible Impacket SecretDump Remote Activity chore: Suspicious PsExec Execution chore: Remote Service Activity via SVCCTL Named Pipe chore: Suspicious DotNET CLR Usage Log Artifact chore: DotNet CLR DLL Loaded By Scripting Applications chore: Potential Credential Dumping Activity Via LSASS chore: DNS RCE CVE-2020-1350 --------- thanks: @fukusuket	2024-07-31 10:16:56 +02:00
frack113	8b749fb126	Order yaml field	2022-10-25 11:08:51 +02:00
frack113	05d9ee85ed	Rename security rules	2022-10-14 08:53:50 +02:00