Andreas Braathen ea4d6095a0 Merge PR #4521 from @netgrain - Add New Rules Related To Pikabot ...

new: Potential Pikabot C2 Activity - Suspicious Process Created By Rundll32.EXE
new: Potential Pikabot Discovery Activity - Suspicious Process Created By Rundll32.EXE
new: Potential Pikabot Hollowing Activity - Suspicious Process Created By Rundll32.EXE

---------

Co-authored-by: nasbench <8741929+nasbench@users.noreply.github.com>
Co-authored-by: phantinuss <79651203+phantinuss@users.noreply.github.com>

2023-11-06 14:10:52 +01:00

..

cti @ 340ee45256

chore: update submodule tests/cti

2023-07-19 14:10:39 +02:00

validate-sigma-schema

fix path to schema json

2023-08-15 13:18:33 +02:00

check-baseline-local.sh

Merge PR #4464 from @phantinuss - Update Goodlog Test

2023-09-29 14:33:55 +02:00

logsource.json

Merge PR #4521 from @netgrain - Add New Rules Related To Pikabot

2023-11-06 14:10:52 +01:00

promote_rules_status.py

Merge PR #4482 From @nasbench - Add New Automation Workflows

2023-10-18 11:53:44 +02:00

reference-archiver.py

Merge PR #4539 from @nasbench - Update Archiver Script & Related Workflow

2023-11-03 15:01:20 +01:00

rule-references.txt

Merge PR #4540 from @nasbench - Update Archived Rule References

2023-11-03 16:59:06 +01:00

sigma_cli_conf.yml

Merge PR #4541 from @frack113 - Update SIGMA tests

2023-11-06 13:06:55 +01:00

sigma-package-release.py

Merge PR #4476 from @nasbench - re-organize cloud folder and other things

2023-10-12 13:32:24 +02:00

test_logsource.py

Merge PR #4476 from @nasbench - re-organize cloud folder and other things

2023-10-12 13:32:24 +02:00

test_rules.py

Merge PR #4541 from @frack113 - Update SIGMA tests

2023-11-06 13:06:55 +01:00

thor.yml

Merge PR #4482 From @nasbench - Add New Automation Workflows

2023-10-18 11:53:44 +02:00