sigma-rules

Files

T

Ruben Groenewoud d26951d94e [New Rule] Suspicious File Modification (#3746 )

* [New Rule] Suspicious File Modification

* Update persistence_suspicious_file_modifications.toml

* Update rules/linux/persistence_suspicious_file_modifications.toml

Co-authored-by: Jonhnathan <26856693+w0rk3r@users.noreply.github.com>

* Update rules/linux/persistence_suspicious_file_modifications.toml

Co-authored-by: Jonhnathan <26856693+w0rk3r@users.noreply.github.com>

* Updates

* Update rules/integrations/fim/persistence_suspicious_file_modifications.toml

---------

Co-authored-by: Jonhnathan <26856693+w0rk3r@users.noreply.github.com>
Co-authored-by: Justin Ibarra <16747370+brokensound77@users.noreply.github.com>

(cherry picked from commit ec223a4a05)

2024-06-11 11:06:39 +00:00

aws

[New Rule] AWS EC2 Instance Connect SSH Public Key Uploaded (#3634 )

2024-06-05 14:36:53 +00:00

azure

Back-porting Version Trimming (#3704 )

2024-05-22 19:18:10 +00:00

beaconing

Update rule setup instructions for UEBA packages (#3652 )

2024-05-28 19:24:45 +00:00

cloud_defend

Back-porting Version Trimming (#3704 )