sigma-rules

Files

T

Isai 094ad60ff6 [New Rule] New GitHub App Installed (#3055 )

* new rule

* Update rules/integrations/github/execution_new_github_app_installed.toml

* Update rules/integrations/github/execution_new_github_app_installed.toml

edits from review

Co-authored-by: Ruben Groenewoud <78494512+Aegrah@users.noreply.github.com>

* change query from event.module to event.dataset

---------

Co-authored-by: Ruben Groenewoud <78494512+Aegrah@users.noreply.github.com>
Co-authored-by: Terrance DeJesus <99630311+terrancedejesus@users.noreply.github.com>

(cherry picked from commit 374c9c6257)

2023-10-13 00:16:30 +00:00

aws

[Security Content] Tags Reform (#2725 )

2023-06-22 18:38:56 -03:00

azure

[Security Content] Include "Data Source: Elastic Defend" tag (#3002 )

2023-09-05 18:28:40 +00:00

cloud_defend

[New Rule] Modification of Dynamic Linker Preload Shared Object Inside A Container (#2837 )

2023-07-17 15:03:24 -04:00

cyberarkpas

[Security Content] Tags Reform (#2725 )