Florian Roth d15f3d738b Merge pull request #3207 from SigmaHQ/rule-devel ...

fix: missing Windows Defender source, rule: Proxy UA Base64

2022-07-08 11:14:00 +02:00

..

proxy_apt40.yml

remove invalid tag

2022-01-19 18:23:30 +01:00

proxy_apt_domestic_kitten.yml

Domestic Kitten Furball malware pattern

2021-02-08 17:52:55 +01:00

proxy_baby_shark.yml

Spelling Errors on Rules

2021-08-18 18:58:20 +00:00

proxy_chafer_malware.yml

remove invalid tag

2022-01-19 18:23:30 +01:00

proxy_cobalt_amazon.yml

Update proxy_cobalt_amazon.yml

2022-07-07 15:29:46 +01:00

proxy_cobalt_malformed_uas.yml

remove invalid tag

2022-01-19 18:23:30 +01:00

proxy_cobalt_ocsp.yml

Reference Update [Batch 1]

2022-07-07 15:24:15 +01:00

proxy_cobalt_onedrive.yml

Reference Update [Batch 1]

2022-07-07 15:24:15 +01:00

proxy_download_susp_dyndns.yml

Change status for old rules

2021-11-27 11:33:14 +01:00

proxy_download_susp_tlds_blacklist.yml

remove invalid tag

2022-01-19 18:23:30 +01:00

proxy_download_susp_tlds_whitelist.yml

remove invalid tag

2022-01-19 18:23:30 +01:00

proxy_downloadcradle_webdav.yml

remove invalid tag

2022-01-19 18:23:30 +01:00

proxy_empire_ua_uri_combos.yml

remove invalid tag

2022-01-19 18:23:30 +01:00

proxy_empty_ua.yml

Change status for old rules

2021-11-27 11:33:14 +01:00

proxy_ios_implant.yml

remove invalid tag

2022-01-19 18:23:30 +01:00

proxy_java_class_download.yml

Update proxy_java_class_download.yml

2021-12-21 13:22:47 +01:00

proxy_powershell_ua.yml

Change status for old rules

2021-11-27 11:33:14 +01:00

proxy_pwndrop.yml

remove invalid tag

2022-01-19 18:23:30 +01:00

proxy_raw_paste_service_access.yml

remove invalid tag

2022-01-19 18:23:30 +01:00

proxy_susp_flash_download_loc.yml

remove invalid tag

2022-01-19 18:23:30 +01:00

proxy_telegram_api.yml

chore: test rules: reactivate single value list check

2022-05-10 17:13:04 +02:00

proxy_turla_comrat.yml

refactor: rule level adjustments - critical to high

2022-06-18 17:43:22 +02:00

proxy_ua_apt.yml

rule: APT UA - new user agent

2021-12-01 14:20:05 +01:00

proxy_ua_bitsadmin_susp_ip.yml

refactor: BITS rules new and reworked

2022-06-10 13:16:40 +02:00

proxy_ua_bitsadmin_susp_tld.yml

Adds allow for spotify streaming, which uses this service

2022-05-09 20:38:25 +00:00

proxy_ua_cryptominer.yml

Change status for old rules

2021-11-27 11:33:14 +01:00

proxy_ua_frameworks.yml

Change status for old rules

2021-11-27 11:33:14 +01:00

proxy_ua_hacktool.yml

Reference Update [Batch 1]

2022-07-07 15:24:15 +01:00

proxy_ua_malware.yml

Change status for old rules

2021-11-27 11:33:14 +01:00

proxy_ua_susp_base64.yml

fix: list and add base64 encoded Mozilla keyword

2022-07-08 10:50:52 +02:00

proxy_ua_susp.yml

Reference Update [Batch 1]

2022-07-07 15:24:15 +01:00

proxy_ursnif_malware_c2_url.yml

remove invalid tag

2022-01-19 18:23:30 +01:00

proxy_ursnif_malware_download_url.yml

refactor: rule level adjustments - critical to high

2022-06-18 17:43:22 +02:00