mirror of
https://github.com/SigmaHQ/sigma
synced 2026-06-08 12:34:14 +00:00
28102e58ee
Add filter_common exclusions for ParentCommandLine 'openclaw-gateway' and CommandLine 'ip neigh show', update the rule condition to exclude these benign matches, and bump the modified date to 2025-02-13. This reduces false positives for common legitimate network discovery activity.
TBD