sigma-rules

Author	SHA1	Message	Date
Jonhnathan	c0f12ddecf	[Rule Tuning] Tighten Up Windows EventLog Indexes, Improve tags (#4464 ) * [Rule Tuning] Tighten Up Windows EventLog Indexes, Improve tags * Format & order * Update pyproject.toml * Update credential_access_cookies_chromium_browsers_debugging.toml	2025-02-19 12:54:31 -03:00
Mika Ayenson	fe8c81d762	[FR] Generate investigation guides (#4358 )	2025-01-22 11:17:38 -06:00
Jonhnathan	2b6116e0ce	[Rule Tuning] 3rd Party EDR - Add Crowdstrike FDR support - 3 (#4222 )	2024-11-04 11:55:04 -03:00
Jonhnathan	2c07e88c07	[Rule Tuning] Fix double bumps caused by Windows Integration Update (#4156 )	2024-10-15 23:57:44 +05:30
Jonhnathan	7c78e4081f	[Rule Tuning] min_stack New Rules that use the S1 Integration (#4079 ) * [Rule Tuning] min_stack New Rules that use the S1 Integration * Update execution_windows_powershell_susp_args.toml * Update execution_initial_access_foxmail_exploit.toml	2024-09-16 11:02:46 -03:00
Samirbous	31ca246ea7	[New] Potential Foxmail Exploitation (#4044 ) * Create execution_initial_access_foxmail_exploit.toml * Update execution_initial_access_foxmail_exploit.toml --------- Co-authored-by: Colson Wilhoit <48036388+DefSecSentinel@users.noreply.github.com>	2024-09-16 12:29:40 +01:00