frack113 c70fff4b8b Merge PR #4935 from @frack113 - Add new IIS logsource and related rules ...

chore: add "Microsoft-IIS-Configuration/Operational" support to the tests and thor.yml
new: ETW Logging/Processing Option Disabled On IIS Server
new: HTTP Logging Disabled On IIS Server
new: New Module Module Added To IIS Server
new: Previously Installed IIS Module Was Removed 

---------

Co-authored-by: nasbench <8741929+nasbench@users.noreply.github.com>

2024-10-06 22:44:05 +02:00

..

validate-sigma-schema

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

check-baseline-local.sh

Merge PR #4585 from @phantinuss - Update evtx-baseline to v0.8 and fix FP found in baseline

2023-11-21 15:16:18 +01:00

logsource.json

Merge PR #4935 from @frack113 - Add new IIS logsource and related rules

2024-10-06 22:44:05 +02:00

promote_rules_status.py

Merge PR #4956 from @frack113 - Update promote_rules_status script to use the native datetime.date

2024-08-12 12:04:30 +02:00

reference-archiver.py

Merge PR #4539 from @nasbench - Update Archiver Script & Related Workflow

2023-11-03 15:01:20 +01:00

rule-references.txt

Merge PR #5028 from @nasbench - Archive new rule references and update cache file

2024-10-01 14:55:39 +02:00

sigma_cli_conf.yml

Merge PR #4961 from @tsale - Add multiples rules and updates

2024-08-29 19:21:47 +02:00

sigma-package-release.py

Merge PR #4546 from @phantinuss - Update Release Script and Workflow

2023-11-06 15:40:11 +01:00

test_logsource.py

Merge PR #4839 from @joshnck - Add New RDP Connection Initiated From Domain Controller

2024-05-10 16:32:09 +02:00

test_rules.py

Merge PR #4923 from frack113 - Update test_rules.py to remove the tests covered by pySigma-validators-sigmahq v0.7.0

2024-08-12 12:09:18 +02:00

thor.yml

Merge PR #4935 from @frack113 - Add new IIS logsource and related rules

2024-10-06 22:44:05 +02:00