security-tools/blue-team-tools
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
3565dee3eb7eb98dbee87ba8b3daa8493fcc5322
blue-team-tools/deprecated
T
History
Swachchhanda Shrawan Poudel 3e9318e23f Merge PR #5763 from @swachchhanda000 - Update ClickFix/FileFix related rules 
removed: FileFix - Suspicious Child Process from Browser File Upload Abuse - Deprecated in favor of b5b29e4e-31fa-4fdf-b058-296e7a1aa0c2
new: DNS Query by Finger Utility
new: Network Connection Initiated via Finger.EXE
fix: Suspicious Explorer Process with Whitespace Padding - ClickFix/FileFix - Fix selection to use ParentImage instead of Image field
new: Suspicious FileFix Execution Pattern
update: FileFix - Command Evidence in TypedPaths - Added more markers
update: Potential ClickFix Execution Pattern - Registry - Add 2 new strings, "finger" and "identification"
chore: Update "test_rules.py" filename test with better output formatting

---------

Co-authored-by: phantinuss <79651203+phantinuss@users.noreply.github.com>
Co-authored-by: nasbench <monsteroffire2@gmail.com>
2025-11-27 23:00:25 +01:00
..
cloud
Merge PR #5542 from @peterydzynski - remove Azure Application Credential Modified
2025-10-17 12:14:11 +02:00
linux
Merge PR #5769 from @nasbench - fix keywords rule and remove the fields field
2025-11-24 09:54:29 +01:00
macos
Merge PR #5669 from @JasonPhang98 - Extend Atomic MacOS Stealer - FileGrabber Rules
2025-11-24 08:37:52 +05:45
other
chore: remove contrib folder + rename folders
2023-04-23 15:42:01 +02:00
web
Merge PR #4845 from @ahmedfarou22 - Proxy WebDAV Rule Improvements/New Rule
2024-05-10 16:16:42 +02:00
windows
Merge PR #5763 from @swachchhanda000 - Update ClickFix/FileFix related rules
2025-11-27 23:00:25 +01:00
deprecated.csv
Merge PR #5756 from @phantinuss - add a check for duplicate IDs over all rules that ever existed
2025-11-13 14:22:02 +01:00
deprecated.json
Merge PR #5756 from @phantinuss - add a check for duplicate IDs over all rules that ever existed
2025-11-13 14:22:02 +01:00
README.md
Merge PR #5402 from @ariel-anieli - feat: add JSON output format for deprecated rule summary
2025-06-13 10:59:34 +02:00

README.md

Deprecated folder

This folder contains all rules that have been marked as deprecated.

It is recommended to avoid using these rules, as they are no longer maintained or supported.

For a summary of the deprecated rules, refer to deprecated.csv or deprecated.json

references

https://github.com/SigmaHQ/sigma-specification/blob/main/specification/sigma-rules-specification.md#status

Reference in New Issue View Git Blame Copy Permalink