Commits

Branch selector

 master

User selector

All users

Datepicker

All time

Commit History

Commits on Jun 11, 2019

• Converted rule to generic log source

  thomaspatzke

  committed
  a23f15d

  Copy full SHA for a23f15d

• Usage of Channel field name in ELK Windows config

  thomaspatzke

  committed
  5715413

  Copy full SHA for 5715413

Commits on Jun 7, 2019

• Added APT40 Dropbox exfiltration proxy rule

  thomaspatzke

  committed
  407d821

  Copy full SHA for 407d821

Commits on Jun 2, 2019

• Rule: renamed file - name was too generic

  

  Florian Roth

  committed
  a0c9f15

  Copy full SHA for a0c9f15

• Rule: added wmic SHADOWCOPY DELETE

  

  Florian Roth

  committed
  491c519

  Copy full SHA for 491c519

• Rule: Scanner PoC for CVE-2019-0708 RDP RCE vuln

  

  Florian Roth

  committed
  80560dc

  Copy full SHA for 80560dc

• Rule: Split up WanaCry rule into two separate rules

  

  Florian Roth

  committed
  5e7ae05

  Copy full SHA for 5e7ae05

Commits on Jun 1, 2019

• Merge pull request SigmaHQ#361 from neu5ron/patch-4

  Show description for df35d70
  Neo23x0

  authored
  df35d70

  Copy full SHA for df35d70

• update correct process name

  Show description for 2163208
  neu5ron

  authored
  2163208

  Copy full SHA for 2163208

Commits on May 30, 2019

• Merge branch 'master' of https://github.com/Neo23x0/sigma

  thomaspatzke

  committed
  8a0f706

  Copy full SHA for 8a0f706

• Sigma tools release 0.11

  thomaspatzke

  committed
  1986bcb

  Copy full SHA for 1986bcb

• Merge pull request SigmaHQ#336 from petermat/added_rule_T1156

  Show description for 4e96666
  thomaspatzke

  authored
  4e96666

  Copy full SHA for 4e96666

• Merge pull request SigmaHQ#357 from agix/es_dsl_bug

  Show description for 673973e
  thomaspatzke

  authored
  673973e

  Copy full SHA for 673973e

• Merge branch 'agix-elastalert_dsl_backend'

  thomaspatzke

  committed
  fa0aaa7

  Copy full SHA for fa0aaa7

• Added test for new elastalert-dsl backend

  thomaspatzke

  committed
  67707b6

  Copy full SHA for 67707b6

• Merge branch 'elastalert_dsl_backend' of https://github.com/agix/sigma into agix-elastalert_dsl_backend

  thomaspatzke

  committed
  8023011

  Copy full SHA for 8023011

Commits on May 29, 2019

• Wrong fix, self.queries should be emptied after copied to rule_object

  

  Florian GAULTIER

  committed
  89c1d7b

  Copy full SHA for 89c1d7b

• Dont combine multiple queries

  

  Florian GAULTIER

  committed
  748ac2e

  Copy full SHA for 748ac2e

• Merge pull request SigmaHQ#360 from spellanser/patch-1

  Show description for 2cf402a
  Neo23x0

  authored
  2cf402a

  Copy full SHA for 2cf402a

• win_disable_event_logging.yml: typo in audit policy name;

  

  Sarkis Nanyan

  authored
  60bc525

  Copy full SHA for 60bc525

Commits on May 28, 2019

• Merge pull request SigmaHQ#355 from agix/allow_empty_keyword

  Show description for 04d9157
  thomaspatzke

  authored
  04d9157

  Copy full SHA for 04d9157

• Merge pull request SigmaHQ#351 from ipninichuck/master

  Show description for 2ecc55c
  thomaspatzke

  authored
  2ecc55c

  Copy full SHA for 2ecc55c

• Merge pull request SigmaHQ#346 from tuckner/master

  Show description for f3edc39
  thomaspatzke

  authored
  f3edc39

  Copy full SHA for f3edc39

Commits on May 27, 2019

• Be sure there is a key in the single condition

  

  Florian GAULTIER

  committed
  d866e75

  Copy full SHA for d866e75

• fix missing condition when unique plus timeframe

  

  Florian GAULTIER

  committed
  e8a7c5f

  Copy full SHA for e8a7c5f

• introduce elastalert-dsl

  Show description for 6bf010f
  

  Florian GAULTIER

  committed
  6bf010f

  Copy full SHA for 6bf010f

• Allow empty keyword_field

  

  Florian GAULTIER

  committed
  4168c0e

  Copy full SHA for 4168c0e

• Improved message if configuration is missing

  thomaspatzke

  committed
  36ba9f7

  Copy full SHA for 36ba9f7

• Merge pull request SigmaHQ#353 from lprat/master

  Show description for 7c1e856
  Neo23x0

  authored
  7c1e856

  Copy full SHA for 7c1e856

• FP adjustments

  Show description for 323a731
  Neo23x0

  authored
  323a731

  Copy full SHA for 323a731

Commits on May 24, 2019

• Improved behavior on missing configuration

  Show description for 8469028
  thomaspatzke

  committed
  8469028

  Copy full SHA for 8469028

• Merged WannaCry rules

  thomaspatzke

  committed
  241d814

  Copy full SHA for 241d814

• Add rule for CVE-2019-0708

  lprat

  committed
  f65f693

  Copy full SHA for f65f693

Commits on May 23, 2019

• Rule: applying recommendation

  Show description for 7b63c92
  

  Florian Roth

  committed
  7b63c92

  Copy full SHA for 7b63c92

Commits on May 22, 2019

• Merge pull request SigmaHQ#350 from olafhartong/master

  Show description for 253417a
  Neo23x0

  authored
  253417a

  Copy full SHA for 253417a

Pagination

Previous

Next