Stephen Lincoln 267de25efb Merge PR #4633 from @slincoln-aiq - New Rules Related To Desktop Background Change ...

new: Potentially Suspicious Desktop Background Change Using Reg.EXE
new: Potentially Suspicious Desktop Background Change Via Registry 

---------

Co-authored-by: nasbench <8741929+nasbench@users.noreply.github.com>
Co-authored-by: phantinuss <79651203+phantinuss@users.noreply.github.com>

2023-12-21 11:44:52 +01:00

..

validate-sigma-schema

Merge PR #4612 from @nasbench - Update Json Schema

2023-12-01 22:46:32 +01:00

check-baseline-local.sh

Merge PR #4585 from @phantinuss - Update evtx-baseline to v0.8 and fix FP found in baseline

2023-11-21 15:16:18 +01:00

logsource.json

Merge PR #4521 from @netgrain - Add New Rules Related To Pikabot

2023-11-06 14:10:52 +01:00

promote_rules_status.py

Merge PR #4482 From @nasbench - Add New Automation Workflows

2023-10-18 11:53:44 +02:00

reference-archiver.py

Merge PR #4539 from @nasbench - Update Archiver Script & Related Workflow

2023-11-03 15:01:20 +01:00

rule-references.txt

Merge PR #4629 from @nasbench - Archive new rule references and update cache file

2023-12-15 12:00:29 +01:00

sigma_cli_conf.yml

Merge PR #4633 from @slincoln-aiq - New Rules Related To Desktop Background Change

2023-12-21 11:44:52 +01:00

sigma-package-release.py

Merge PR #4546 from @phantinuss - Update Release Script and Workflow

2023-11-06 15:40:11 +01:00

test_logsource.py

Merge PR #4476 from @nasbench - re-organize cloud folder and other things

2023-10-12 13:32:24 +02:00

test_rules.py

Merge PR #4615 from @jstnk9 - Update WMIC Discovery Rule + New System Discovery Rules For MacOS

2023-12-21 11:09:47 +01:00

thor.yml

Merge PR #4482 From @nasbench - Add New Automation Workflows

2023-10-18 11:53:44 +02:00