Code

Fixes & Updates#4577

Code

Merged

nasbench merged 45 commits intoSigmaHQ:masterSigmaHQ/sigma:masterfrom nasbench:fix-env-stuffnasbench/sigma:fix-env-stuffCopy head branch name to clipboardDec 21, 2023

+6,481-4,839

Commits

Commits on Nov 15, 2023

• fix: SigmaHQ#4572

  nasbench

  committed
  8ce18be

  Copy full SHA for 8ce18be

Commits on Nov 17, 2023

• feat: update batch

  nasbench

  committed
  47dad80

  Copy full SHA for 47dad80

• Update win_security_disable_event_auditing_critical.yml

  nasbench

  committed
  d4afe62

  Copy full SHA for d4afe62

Commits on Nov 22, 2023

• feat: update defender rule

  nasbench

  committed
  13ca304

  Copy full SHA for 13ca304

• feat: more updates

  nasbench

  committed
  d508093

  Copy full SHA for d508093

• Update win_defender_antimalware_platform_expired.yml

  nasbench

  committed
  705a7b5

  Copy full SHA for 705a7b5

Commits on Nov 23, 2023

• quick fix

  nasbench

  committed
  7b93e1f

  Copy full SHA for 7b93e1f

Commits on Nov 30, 2023

• feat: small update

  nasbench

  committed
  73401bb

  Copy full SHA for 73401bb

• feat: update pipe rules

  nasbench

  committed
  9af5519

  Copy full SHA for 9af5519

Commits on Dec 2, 2023

• fix: SigmaHQ#4613

  nasbench

  committed
  1ee22da

  Copy full SHA for 1ee22da

Commits on Dec 4, 2023

• fix: SigmaHQ#4572

  nasbench

  committed
  c445b84

  Copy full SHA for c445b84

• feat: update batch

  nasbench

  committed
  80a0406

  Copy full SHA for 80a0406

• Update win_security_disable_event_auditing_critical.yml

  nasbench

  committed
  27041ea

  Copy full SHA for 27041ea

• feat: update defender rule

  nasbench

  committed
  d83316f

  Copy full SHA for d83316f

• feat: more updates

  nasbench

  committed
  0b0d168

  Copy full SHA for 0b0d168

• Update win_defender_antimalware_platform_expired.yml

  nasbench

  committed
  aa22111

  Copy full SHA for aa22111

• quick fix

  nasbench

  committed
  cb1f9bb

  Copy full SHA for cb1f9bb

• feat: small update

  nasbench

  committed
  d6556b4

  Copy full SHA for d6556b4

• feat: update pipe rules

  nasbench

  committed
  eb03657

  Copy full SHA for eb03657

• fix: SigmaHQ#4613

  nasbench

  committed
  4437690

  Copy full SHA for 4437690

• Merge branch 'fix-env-stuff' of https://github.com/nasbench/sigma into fix-env-stuff

  nasbench

  committed
  cc7cf2a

  Copy full SHA for cc7cf2a

• fix: susp service rule

  nasbench

  committed
  b617b8d

  Copy full SHA for b617b8d

Commits on Dec 11, 2023

• Merge branch 'SigmaHQ:master' into fix-env-stuff

  nasbench

  authored
  8d34ade

  Copy full SHA for 8d34ade

Commits on Dec 13, 2023

• fix: fp found in testing

  nasbench

  committed
  148fdd5

  Copy full SHA for 148fdd5

Commits on Dec 18, 2023

• feat: more updates

  nasbench

  committed
  249777f

  Copy full SHA for 249777f

• feat: even more updates

  nasbench

  committed
  7578f41

  Copy full SHA for 7578f41

• Update proc_access_win_lsass_susp_source_process.yml

  nasbench

  committed
  b35da8c

  Copy full SHA for b35da8c

• fix: indentation issues

  nasbench

  committed
  d4bdcfb

  Copy full SHA for d4bdcfb

• fix: more issues fixed

  nasbench

  committed
  5f9d4bf

  Copy full SHA for 5f9d4bf

Commits on Dec 19, 2023

• fix: typo/wording

  phantinuss

  authored
  5e22b5e

  Copy full SHA for 5e22b5e

• Update rules-placeholder/windows/builtin/security/win_security_admin_logon.yml

  Show description for 8b463bc
  

  nasbench

  and

  phantinuss

  authored
  8b463bc

  Copy full SHA for 8b463bc

• Update rules-threat-hunting/windows/powershell/powershell_classic/posh_pc_alternate_powershell_hosts.yml

  Show description for 0c99a49
  

  nasbench

  and

  phantinuss

  authored
  0c99a49

  Copy full SHA for 0c99a49

• Update rules-threat-hunting/windows/powershell/powershell_script/posh_ps_remove_item_path.yml

  Show description for 04cc9b9
  

  nasbench

  and

  phantinuss

  authored
  04cc9b9

  Copy full SHA for 04cc9b9

• Update rules/windows/driver_load/driver_load_win_mal_drivers_names.yml

  Show description for 5853cb8
  

  nasbench

  and

  phantinuss

  authored
  5853cb8

  Copy full SHA for 5853cb8

• Update rules/windows/driver_load/driver_load_win_vuln_drivers_names.yml

  Show description for 7b8f3d8
  

  nasbench

  and

  phantinuss

  authored
  7b8f3d8

  Copy full SHA for 7b8f3d8

• Update rules/windows/network_connection/net_connection_win_susp_malware_callback_ports_uncommon.yml

  Show description for c64c87b
  

  nasbench

  and

  phantinuss

  authored
  c64c87b

  Copy full SHA for c64c87b

• Update rules/windows/process_creation/proc_creation_win_rundll32_uncommon_dll_extension.yml

  Show description for d1ec23e
  

  nasbench

  and

  phantinuss

  authored
  d1ec23e

  Copy full SHA for d1ec23e

• Update net_connection_win_susp_malware_callback_ports_uncommon.yml

  nasbench

  authored
  50344e3

  Copy full SHA for 50344e3

• Update win_security_susp_lsass_dump_generic.yml

  nasbench

  authored
  e7f6842

  Copy full SHA for e7f6842

• Update proc_creation_win_whoami_priv_discovery.yml

  nasbench

  authored
  cfe1435

  Copy full SHA for cfe1435

• Update rules/windows/process_creation/proc_creation_win_susp_elevated_system_shell_uncommon_parent.yml

  Show description for 62e089c
  

  nasbench

  and

  phantinuss

  authored
  62e089c

  Copy full SHA for 62e089c

• fix: update description

  nasbench

  committed
  9760c73

  Copy full SHA for 9760c73

• chore: rollback change

  nasbench

  committed
  3727eef

  Copy full SHA for 3727eef

• chore: move to TH

  nasbench

  committed
  074e384

  Copy full SHA for 074e384

Commits on Dec 21, 2023

• Update rules/windows/process_creation/proc_creation_win_regasm_regsvcs_uncommon_extension_execution.yml

  nasbench

  authored
  9f77c2e

  Copy full SHA for 9f77c2e