 frack113
|
df015e555c
|
Add more ref
|
2022-12-23 13:22:50 +01:00 |
|
|
frack113
|
546e53fb35
|
Apply suggestions from code review
Co-authored-by: Nasreddine Bencherchali <8741929+nasbench@users.noreply.github.com>
|
2022-12-23 12:34:56 +01:00 |
|
|
frack113
|
bee5b2f252
|
Issue 575 page 43
|
2022-12-23 11:10:17 +01:00 |
|
|
frack113
|
b200b5dedb
|
Fix title
|
2022-12-23 10:58:11 +01:00 |
|
|
frack113
|
9617cdd4ea
|
Issue 575 page 42
|
2022-12-23 10:50:34 +01:00 |
|
|
Nasreddine Bencherchali
|
80ef3b70dc
|
fix: broken single item lists
|
2022-12-08 16:23:58 +01:00 |
|
|
gs3cl
|
122cb47d71
|
Gs3cl patch 1 (#3753)
|
2022-12-05 10:39:58 +01:00 |
|
|
fukusuket
|
9c76aac1fc
|
refactor: remove unnesessary escape.
|
2022-12-03 21:56:00 +09:00 |
|
|
frack113
|
064132a5a8
|
Merge pull request #3744 from fukusuket/refactor-remove-unnecessary-escape
refactor: remove unneeded escapes(in `|re` block)
|
2022-12-03 09:36:09 +01:00 |
|
|
frack113
|
0f3eefdc9c
|
Update title (#3746)
Co-authored-by: Nasreddine Bencherchali <8741929+nasbench@users.noreply.github.com>
|
2022-12-02 18:10:43 +01:00 |
|
|
fukusuket
|
ead6831b25
|
update modified date.
|
2022-12-02 21:57:37 +09:00 |
|
|
fukusuket
|
a05742b420
|
refactor: remove unnesessary escape.
|
2022-12-02 21:26:45 +09:00 |
|
|
fukusuket
|
7b1d23621c
|
refactor: remove unnesessary escape.
|
2022-12-02 20:17:39 +09:00 |
|
|
frack113
|
a674ee246b
|
Update Title (#3739)
|
2022-11-30 11:44:15 +01:00 |
|
|
Fukusuke Takahashi
|
76fece654a
|
fix: explicitly escape { to make it clear that it is a literal (#3737)
|
2022-11-30 11:43:49 +01:00 |
|
|
frack113
|
c820216541
|
Update Title (#3733)
|
2022-11-28 06:43:17 +01:00 |
|
|
frack113
|
cd4121d966
|
Update Title (#3731)
Co-authored-by: Florian Roth <venom14@gmail.com>
Co-authored-by: Nasreddine Bencherchali <8741929+nasbench@users.noreply.github.com>
|
2022-11-27 19:19:27 +01:00 |
|
|
jstnk9
|
3572e9d9ea
|
titles modified (#3730)
|
2022-11-26 08:49:30 +01:00 |
|
|
Nasreddine Bencherchali
|
89d69de27f
|
fix: rename + update rule
|
2022-11-21 12:40:54 +01:00 |
|
|
Nasreddine Bencherchali
|
6603ca9202
|
fix: update rules to not use regex
|
2022-11-18 11:16:13 +01:00 |
|
|
Nasreddine Bencherchali
|
20b0a6bad8
|
Rule Dev
|
2022-11-18 11:15:28 +01:00 |
|
|
Florian Roth
|
928f07c366
|
Merge pull request #3683 from SigmaHQ/rule-devel
rule: KDC RC4-HMAC downgrade CVE-2022-37966
|
2022-11-09 10:19:04 +01:00 |
|
|
Florian Roth
|
026af279de
|
fix: duplicate UUID
|
2022-11-09 09:56:04 +01:00 |
|
|
Florian Roth
|
50baf18a68
|
rule: amsi bypass script - psh rule
|
2022-11-09 09:48:19 +01:00 |
|
|
Nasreddine Bencherchali
|
5ee9428e59
|
Fix
|
2022-11-03 09:39:48 +01:00 |
|
|
Mustafa Kaan Demir
|
27822a0827
|
DomainPasswordSpray Attacks Rule
|
2022-10-29 09:36:40 +02:00 |
|
|
Nasreddine Bencherchali
|
efe0cf5871
|
Add/Update Exchange/Mailbox Rules
|
2022-10-26 23:17:54 +02:00 |
|
|
Nasreddine Bencherchali
|
bb84e503fa
|
Merge branch 'master' into nasbench-rule-devel
|
2022-10-26 10:39:55 +02:00 |
|
|
frack113
|
1e5ae09c4b
|
Order yaml field
|
2022-10-26 09:43:39 +02:00 |
|
|
Nasreddine Bencherchali
|
1258eca847
|
fix: Fix typo in selection
|
2022-10-25 01:47:53 +02:00 |
|
|
Nasreddine Bencherchali
|
ada1121447
|
Add Office Token Stealing Rules
|
2022-10-25 01:14:27 +02:00 |
|
|
Nasreddine Bencherchali
|
87e8e7fa33
|
Create posh_ps_susp_service_dacl_modification_set_service.yml
|
2022-10-24 12:17:41 +02:00 |
|
|
Qasim Qlf
|
2c4ea3761a
|
Update and rename posh_ps_copy_item_system32.yml to posh_ps_copy_item_system_directory.yml
|
2022-10-20 14:31:48 +05:00 |
|
|
phantinuss
|
f976ad48c1
|
Merge pull request #3602 from nasbench/nasbench-rule-devel
Rule Dev
|
2022-10-20 10:28:56 +02:00 |
|
|
frack113
|
27ad27c3c0
|
Merge pull request #3608 from unamuno/patch-mitreid
changed mitre id from process to user discovery
|
2022-10-19 22:31:37 +02:00 |
|
|
Merlin
|
575f36d8f8
|
changed mitre id from process to user discovery
|
2022-10-19 16:10:47 +02:00 |
|
|
Nasreddine Bencherchali
|
21040fc106
|
Update posh_ps_using_set_service_to_hide_services.yml
|
2022-10-18 20:13:45 +02:00 |
|
|
Nasreddine Bencherchali
|
676578d2c4
|
Add PowerShell version of the rule + Fix rule
|
2022-10-18 16:03:26 +02:00 |
|
|
Florian Roth
|
450229537e
|
Merge pull request #3595 from SigmaHQ/rule-devel
rule: extended susp adfind rule, rule: susp wermgr process patterns
|
2022-10-15 10:49:50 +02:00 |
|
|
Florian Roth
|
6706a67bb8
|
refactor: move few apt rules to categories, del 'apt' folder
|
2022-10-14 11:44:49 +02:00 |
|
|
Nasreddine Bencherchali
|
f4257c33b1
|
Update posh_ps_wmi_unquoted_service_search.yml
|
2022-10-14 00:51:21 +02:00 |
|
|
Nasreddine Bencherchali
|
48e7f9e302
|
Merge branch 'master' into nasbench-rule-devel
|
2022-10-14 00:49:20 +02:00 |
|
|
Nasreddine Bencherchali
|
d42e5b5435
|
New Rules
|
2022-10-12 10:04:04 +02:00 |
|
|
Tim Rauch
|
a94832de90
|
Updated rule 488b44e7-3781-4a71-888d-c95abfacf44d
|
2022-10-11 12:39:40 +02:00 |
|
|
Tim Rauch
|
4ab6fe537a
|
Updated some rules
|
2022-10-11 12:38:23 +02:00 |
|
|
Tim Rauch
|
3454738439
|
Merge branch 'master'
|
2022-10-11 11:32:20 +02:00 |
|
|
Tim Rauch
|
b992a0e340
|
fix: updated rules after review
|
2022-10-11 11:29:08 +02:00 |
|
|
Florian Roth
|
83f93bc32c
|
Merge branch 'master' into master
|
2022-10-10 00:27:48 +02:00 |
|
|
frack113
|
931fb30853
|
old experimental rule promotion
|
2022-10-09 16:54:04 +02:00 |
|
|
Florian Roth
|
d8890295fe
|
Merge branch 'master' into master
|
2022-10-07 16:24:30 +02:00 |
|