SigmaHQ-sigma

mirror of https://github.com/SigmaHQ/sigma synced 2026-06-08 12:34:14 +00:00

Files

T

Florian Roth 17dcad456f Merge PR #5116 from @Neo23x0 - Add rules and updates related to Cleo exploitation

new: CVE-2024-50623 Exploitation Attempt - Cleo
update: Webshell Detection With Command Line Keywords - Add suspicious powershell commandline keywords
---------

Co-authored-by: Nasreddine Bencherchali <nasreddineb@splunk.com>

2024-12-14 22:44:55 +02:00

application

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

category

Merge PR #5068 from @ruppde - Update rules in the Antivirus category with additional strings and signature names

2024-11-04 11:45:07 +01:00

cloud

Merge PR #5017 from @saakovv - Add Modification or Deletion of an AWS RDS Cluster

2024-12-07 00:19:18 +01:00

compliance

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

linux

Merge PR #5119 from @CheraghiMilad - Update Terminate Linux Process Via Kill

2024-12-14 22:26:02 +02:00

macos

Merge PR #5065 from @nasbench - Promote older rules status from experimental to test

2024-11-01 10:21:04 +01:00

network

Merge PR #5064 from @Koifman - Add missing ATT&CK tag to Monero Crypto Coin Mining Pool Lookup

2024-11-04 11:32:02 +01:00

web

Merge PR #5027 from @nasbench - Promote older rules status from experimental to test

2024-10-01 14:56:09 +02:00

windows

Merge PR #5116 from @Neo23x0 - Add rules and updates related to Cleo exploitation

2024-12-14 22:44:55 +02:00

README.md

chore: move more rules

2023-04-21 15:01:48 +02:00

README.md

TBD