Josh 0192a5207e Merge PR #4839 from @joshnck - Add New RDP Connection Initiated From Domain Controller ...

new: New RDP Connection Initiated From Domain Controller 

---------

Co-authored-by: frack113 <62423083+frack113@users.noreply.github.com>
Co-authored-by: nasbench <8741929+nasbench@users.noreply.github.com>

2024-05-10 16:32:09 +02:00

..

validate-sigma-schema

Merge PR #4772 from @mostafa - update sigma validation CI workflow to fix errors

2024-03-15 18:21:15 +01:00

check-baseline-local.sh

Merge PR #4585 from @phantinuss - Update evtx-baseline to v0.8 and fix FP found in baseline

2023-11-21 15:16:18 +01:00

logsource.json

Merge PR #4839 from @joshnck - Add New RDP Connection Initiated From Domain Controller

2024-05-10 16:32:09 +02:00

promote_rules_status.py

Merge PR #4656 from @frack113 - Upgrade rule promotion script to use pySigma

2024-01-26 12:55:24 +01:00

reference-archiver.py

Merge PR #4539 from @nasbench - Update Archiver Script & Related Workflow

2023-11-03 15:01:20 +01:00

rule-references.txt

Merge PR #4842 from @nasbench - Archive new rule references and update cache file

2024-05-02 10:33:45 +02:00

sigma_cli_conf.yml

Merge PR #4847 from @frack113 - Update test Workflow to use pySigma-validators-sigmahq

2024-05-10 10:32:54 +02:00

sigma-package-release.py

Merge PR #4546 from @phantinuss - Update Release Script and Workflow

2023-11-06 15:40:11 +01:00

test_logsource.py

Merge PR #4839 from @joshnck - Add New RDP Connection Initiated From Domain Controller

2024-05-10 16:32:09 +02:00

test_rules.py

Merge PR #4847 from @frack113 - Update test Workflow to use pySigma-validators-sigmahq

2024-05-10 10:32:54 +02:00

thor.yml

Merge PR #4826 from @nasbench - Add coverage for CVE-2024-3400

2024-04-24 14:59:24 +02:00