Skip to content

Actions: SigmaHQ/sigma

Actions

Validate Sigma rules

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
sigma-validation.yml
2,210 workflow runs
2,210 workflow runs

Filter by Event

Filter by Status

Filter by Branch

Filter by Actor

New Rule: Azure Login Bypassing Conditional Access Policies Validate Sigma rules #2782: Pull request #5157 synchronize by joshnck
January 8, 2025 17:37 30s joshnck:patch-25
joshnck:patch-25
January 8, 2025 17:37 30s
New Rule: Azure Login Bypassing Conditional Access Policies Validate Sigma rules #2781: Pull request #5157 synchronize by joshnck
January 8, 2025 17:36 23s joshnck:patch-25
joshnck:patch-25
January 8, 2025 17:36 23s
New Rule: Azure Login Bypassing Conditional Access Policies Validate Sigma rules #2780: Pull request #5157 opened by joshnck
January 8, 2025 16:20 26s joshnck:patch-25
joshnck:patch-25
January 8, 2025 16:20 26s
Modify Validate Sigma rules #2779: Pull request #5156 synchronize by joshnck
January 8, 2025 16:10 24s joshnck:test
joshnck:test
January 8, 2025 16:10 24s
Modify Validate Sigma rules #2778: Pull request #5156 opened by joshnck
January 8, 2025 16:07 31s joshnck:test
joshnck:test
January 8, 2025 16:07 31s
Merge PR #5149 from @nasbench - Promote older rules status from `expe… Validate Sigma rules #2776: Commit 8734022 pushed by nasbench
January 6, 2025 14:36 22s master
master
January 6, 2025 14:36 22s
fix: NSIS install using $TEMP are flags matching rules Validate Sigma rules #2775: Pull request #5152 synchronize by Ti-R
January 3, 2025 21:38 27s Ti-R:ti-r/fix_Suspicious_Volume_Shadow_Copy_Vsstrace.dll_Load_on_nsis_install
Ti-R:ti-r/fix_Suspicious_Volume_Shadow_Copy_Vsstrace.dll_Load_on_nsis_install
January 3, 2025 21:38 27s
fix: NSIS install using $TEMP are flags matching rules Validate Sigma rules #2774: Pull request #5152 opened by Ti-R
January 3, 2025 21:36 Action required Ti-R:ti-r/fix_Suspicious_Volume_Shadow_Copy_Vsstrace.dll_Load_on_nsis_install
Ti-R:ti-r/fix_Suspicious_Volume_Shadow_Copy_Vsstrace.dll_Load_on_nsis_install
January 3, 2025 21:36 Action required
Create proc_creation_win_remote_access_tools_anydesk_set_password_via_cli.yml Validate Sigma rules #2773: Pull request #5143 synchronize by DanielKoifman
January 2, 2025 07:50 20s DanielKoifman:proc_creation_win_remote_access_tools_anydesk_set_password_via_cli
DanielKoifman:proc_creation_win_remote_access_tools_anydesk_set_password_via_cli
January 2, 2025 07:50 20s
Create proc_creation_win_remote_access_tools_anydesk_set_password_via_cli.yml Validate Sigma rules #2772: Pull request #5143 synchronize by DanielKoifman
January 2, 2025 07:47 21s DanielKoifman:proc_creation_win_remote_access_tools_anydesk_set_password_via_cli
DanielKoifman:proc_creation_win_remote_access_tools_anydesk_set_password_via_cli
January 2, 2025 07:47 21s
Reg.exe Detections added Validate Sigma rules #2771: Pull request #5135 synchronize by gbL2k
January 1, 2025 22:15 Action required gbL2k:regexedetections
gbL2k:regexedetections
January 1, 2025 22:15 Action required
Update proc_creation_win_reg_windows_defender_tamper.yml Validate Sigma rules #2770: Pull request #5148 opened by MalGamy12
December 31, 2024 11:19 21s MalGamy12:patch-12
MalGamy12:patch-12
December 31, 2024 11:19 21s
Create new rule - Potential SSH Tunnel Persistence Install Using A Scheduled Task Validate Sigma rules #2769: Pull request #5146 opened by resp404nse
December 30, 2024 13:11 Action required resp404nse:new-ssh-persistance
resp404nse:new-ssh-persistance
December 30, 2024 13:11 Action required
Create proc_creation_win_reg_add_AutoAdminLogon_key.yml Validate Sigma rules #2768: Pull request #5053 synchronize by Mahir-Ali-khan
December 30, 2024 04:53 24s Mahir-Ali-khan:patch-2
Mahir-Ali-khan:patch-2
December 30, 2024 04:53 24s
Merge PR #5145 from @djlukic - Update Regex of some rules Validate Sigma rules #2767: Commit fa68da9 pushed by nasbench
December 28, 2024 21:40 20s master
master
December 28, 2024 21:40 20s
Regex improvement on Powershell rules Validate Sigma rules #2766: Pull request #5145 synchronize by djlukic
December 28, 2024 18:07 23s djlukic:ps_regex_fix
djlukic:ps_regex_fix
December 28, 2024 18:07 23s
Regex improvement on Powershell rules Validate Sigma rules #2765: Pull request #5145 synchronize by djlukic
December 27, 2024 16:23 24s djlukic:ps_regex_fix
djlukic:ps_regex_fix
December 27, 2024 16:23 24s
Merge PR #5144 from @djlukic - Fix multiple FPs Validate Sigma rules #2764: Commit 1df3c34 pushed by nasbench
December 27, 2024 15:38 22s master
master
December 27, 2024 15:38 22s
Regex improvement on Powershell rules Validate Sigma rules #2763: Pull request #5145 synchronize by nasbench
December 27, 2024 15:34 21s djlukic:ps_regex_fix
djlukic:ps_regex_fix
December 27, 2024 15:34 21s
Regex improvement on Powershell rules Validate Sigma rules #2762: Pull request #5145 opened by djlukic
December 27, 2024 11:38 18s djlukic:ps_regex_fix
djlukic:ps_regex_fix
December 27, 2024 11:38 18s
FP filters for legitimate events Validate Sigma rules #2761: Pull request #5144 synchronize by djlukic
December 26, 2024 14:29 22s djlukic:dec24_fp_fixes
djlukic:dec24_fp_fixes
December 26, 2024 14:29 22s
FP filters for legitimate events Validate Sigma rules #2760: Pull request #5144 synchronize by djlukic
December 26, 2024 14:18 22s djlukic:dec24_fp_fixes
djlukic:dec24_fp_fixes
December 26, 2024 14:18 22s
FP filters for legitimate events Validate Sigma rules #2759: Pull request #5144 synchronize by djlukic
December 26, 2024 14:14 18s djlukic:dec24_fp_fixes
djlukic:dec24_fp_fixes
December 26, 2024 14:14 18s
FP filters for legitimate events Validate Sigma rules #2758: Pull request #5144 synchronize by djlukic
December 25, 2024 09:53 19s djlukic:dec24_fp_fixes
djlukic:dec24_fp_fixes
December 25, 2024 09:53 19s
FP filters for legitimate events Validate Sigma rules #2757: Pull request #5144 opened by djlukic
December 25, 2024 09:47 23s djlukic:dec24_fp_fixes
djlukic:dec24_fp_fixes
December 25, 2024 09:47 23s