Commit Graph

4 Commits

Author SHA1 Message Date
github-actions[bot] 8734022722 Merge PR #5149 from @nasbench - Promote older rules status from experimental to test
chore: promote older rules status from experimental to test

Co-authored-by: nasbench <nasbench@users.noreply.github.com>
2025-01-06 15:36:19 +01:00
Nasreddine Bencherchali 598d29f811 Merge PR #4950 from @nasbench - Comply With v2 Spec Changes
chore: change tags, date, modified fields to comply with v2 of the Sigma spec.
chore: update the related type from `obsoletes` to `obsolete`.
chore: update local json schema to the latest version.
2024-08-12 12:02:50 +02:00
Luca 70abe43f44 Merge PR #4744 from @CrimpSec - Update DLL loading related rules
update: Unsigned DLL Loaded by Windows Utility - Add InstallUtil, RegAsm and RegSvcs as additional process and add additional "null" and "empty" filters to cover for non available fields.
update: Potential PowerShell Execution Via DLL - Add regsvr32 to increase coverage. 

---------

Co-authored-by: nasbench <8741929+nasbench@users.noreply.github.com>
2024-03-07 13:42:05 +01:00
Swachchhanda Shrawan Poudel 2ee4323654 Merge PR #4679 from @swachchhanda000 - Suspicious unsigned DLL Loaded by RunDLL32/RegSvr32
new: Unsigned DLL Loaded by RunDLL32/RegSvr32
---------

Co-authored-by: nasbench <8741929+nasbench@users.noreply.github.com>
2024-01-22 11:40:10 +01:00