frack113 b8a1f4c63b Merge pull request #1961 from SigmaHQ/rule-devel ...

SideWalk User-Agent used by Sparkling Goblin

2021-09-01 08:06:15 +02:00

..

proxy_apt40.yml

Second round

2020-09-15 07:02:30 -06:00

proxy_apt_domestic_kitten.yml

Domestic Kitten Furball malware pattern

2021-02-08 17:52:55 +01:00

proxy_baby_shark.yml

Spelling Errors on Rules

2021-08-18 18:58:20 +00:00

proxy_chafer_malware.yml

Update proxy_chafer_malware.yml

2020-10-15 23:16:17 -03:00

proxy_cobalt_amazon.yml

Update proxy_cobalt_amazon.yml

2020-10-15 23:19:39 -03:00

proxy_cobalt_malformed_uas.yml

rule: cobaltstrike malformed UAs

2021-05-10 12:43:14 +02:00

proxy_cobalt_ocsp.yml

Update proxy_cobalt_ocsp.yml

2020-10-15 23:19:56 -03:00

proxy_cobalt_onedrive.yml

Update proxy_cobalt_onedrive.yml

2020-11-28 19:07:07 +01:00

proxy_download_susp_dyndns.yml

Update proxy_download_susp_dyndns.yml

2020-10-15 23:21:25 -03:00

proxy_download_susp_tlds_blacklist.yml

Update proxy_download_susp_tlds_blacklist.yml

2020-10-15 23:22:17 -03:00

proxy_download_susp_tlds_whitelist.yml

Update proxy_download_susp_tlds_whitelist.yml

2020-10-15 23:22:57 -03:00

proxy_downloadcradle_webdav.yml

Update proxy_downloadcradle_webdav.yml

2020-10-15 23:23:17 -03:00

proxy_empire_ua_uri_combos.yml

Second round

2020-09-15 07:02:30 -06:00

proxy_empty_ua.yml

Second round

2020-09-15 07:02:30 -06:00

proxy_ios_implant.yml

Update proxy_ios_implant.yml

2020-10-15 23:23:52 -03:00

proxy_powershell_ua.yml

Update proxy_powershell_ua.yml

2020-10-15 23:24:06 -03:00

proxy_pwndrop.yml

Second round

2020-09-15 07:02:30 -06:00

proxy_raw_paste_service_access.yml

Second round

2020-09-15 07:02:30 -06:00

proxy_susp_flash_download_loc.yml

Update proxy_susp_flash_download_loc.yml

2020-11-28 18:59:00 +01:00

proxy_telegram_api.yml

Update proxy_telegram_api.yml

2020-10-15 23:25:19 -03:00

proxy_turla_comrat.yml

Second round

2020-09-15 07:02:30 -06:00

proxy_ua_apt.yml

SideWalk UA

2021-08-31 17:14:19 +02:00

proxy_ua_bitsadmin_susp_tld.yml

Split PR 1802 fix net rules

2021-08-09 17:23:15 +02:00

proxy_ua_cryptominer.yml

Update proxy_ua_cryptominer.yml

2020-10-15 23:26:31 -03:00

proxy_ua_frameworks.yml

fixed various spelling errors all over rules and source code

2021-02-24 14:43:13 +00:00

proxy_ua_hacktool.yml

Spelling Errors on Rules

2021-08-18 18:58:20 +00:00

proxy_ua_malware.yml

rule updates

2021-07-28 16:20:21 +02:00

proxy_ua_suspicious.yml

Split PR 1802 fix net rules

2021-08-09 17:23:15 +02:00

proxy_ursnif_malware_c2_url.yml

Split PR 1802 fix net rules

2021-08-09 17:23:15 +02:00

proxy_ursnif_malware_download_url.yml

Split PR 1802 fix net rules

2021-08-09 17:23:15 +02:00