Jason Vasquez 5c39e25d99 Merge PR #5251 from @vasquja - improve regex to correctly detect hex IPv4 addresses ...

fix: Ping Hex IP - refined detection by adding regex to only match true hexadecimal IPv4 formats
---------

Co-authored-by: phantinuss <79651203+phantinuss@users.noreply.github.com>
Co-authored-by: Swachchhanda Shrawan Poudel <87493836+swachchhanda000@users.noreply.github.com>

2025-10-17 08:26:34 +05:45

..

builtin

Merge PR #5532 from @swachchhanda000 - fix: refine detections and filters; update Account Tampering with SubStatus field

2025-10-17 08:12:25 +05:45

create_remote_thread

Merge PR #5513 from @swachchhanda000 - fix FPs observed via Aurora

2025-07-08 10:29:01 +02:00

create_stream_hash

Merge PR #5637 from @nasbench - Promote older rules status from experimental to test

2025-09-22 11:41:37 +02:00

dns_query

Merge PR #5664 from @ norbert791 - update DNS detections

2025-10-01 10:00:15 +02:00

driver_load

Merge PR #5088 from @frack113 - Remove custom dedicated hash fields from sigmac

2024-11-25 09:30:14 +01:00

file

Merge PR #5517 from @swachchhanda000 - fix: office 365 apps related false-positives

2025-10-17 07:57:13 +05:45

image_load

Merge PR #5517 from @swachchhanda000 - fix: office 365 apps related false-positives

2025-10-17 07:57:13 +05:45

network_connection

Merge PR #5517 from @swachchhanda000 - fix: office 365 apps related false-positives

2025-10-17 07:57:13 +05:45

pipe_created

Merge PR #5679 from @swachchhanda000 - chore: update evtx baseline to v0.8.2

2025-10-09 13:03:39 +02:00

powershell

Merge PR #5532 from @swachchhanda000 - fix: refine detections and filters; update Account Tampering with SubStatus field

2025-10-17 08:12:25 +05:45

process_access

Merge PR #5452 from @david-syk - Update the MITRE ATT&CK tags for multiple rules

2025-06-04 14:39:25 +02:00

process_creation

Merge PR #5251 from @vasquja - improve regex to correctly detect hex IPv4 addresses

2025-10-17 08:26:34 +05:45

process_tampering

Merge PR #5027 from @nasbench - Promote older rules status from experimental to test

2024-10-01 14:56:09 +02:00

raw_access_thread

Merge PR #5639 from @swachchhanda000 - Fix some more fps found in prod

2025-09-22 11:46:48 +02:00

registry

Merge PR #5532 from @swachchhanda000 - fix: refine detections and filters; update Account Tampering with SubStatus field

2025-10-17 08:12:25 +05:45

sysmon

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

wmi_event

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00