Grégory Wychowaniec 3054ad5d18 Merge PR #5440 from @gregorywychowaniec-zt - Add filter for local machine whithout IP ...

fix: MSSQL Server Failed Logon From External Network - filter for local_machine without IP

2025-05-31 13:14:46 +02:00

..

builtin

Merge PR #5440 from @gregorywychowaniec-zt - Add filter for local machine whithout IP

2025-05-31 13:14:46 +02:00

create_remote_thread

Merge PR #5101 from @nasbench - Promote older rules status from experimental to test

2024-12-01 13:40:32 +01:00

create_stream_hash

Merge PR #5088 from @frack113 - Remove custom dedicated hash fields from sigmac

2024-11-25 09:30:14 +01:00

dns_query

Merge PR #5390 from @david-syk - Update MITRE ATT&CK tags

2025-05-20 23:08:57 +02:00

driver_load

Merge PR #5088 from @frack113 - Remove custom dedicated hash fields from sigmac

2024-11-25 09:30:14 +01:00

file

Merge PR #5407 from @joshnck - Suspicious Deno File Written from Remote Source

2025-05-27 09:49:30 +02:00

image_load

Merge PR #5418 from @frack113 - chore: 🧹 Update MITRE V17 DLL tags

2025-05-15 12:17:10 +02:00

network_connection

Merge PR #5389 from @david-syk - Update MITRE ATT&CK tags

2025-05-20 23:09:50 +02:00

pipe_created

Merge PR #5065 from @nasbench - Promote older rules status from experimental to test

2024-11-01 10:21:04 +01:00

powershell

Merge PR #5424 from @phantinuss - Some housekeeping

2025-05-20 23:12:55 +02:00

process_access

Merge PR #5380 from @david-syk - Update MITRE ATT&CK tags 2nd batch

2025-04-25 21:01:12 +02:00

process_creation

Merge PR #5429 from @swachchhanda000 - Katz stealer malware

2025-05-26 10:33:24 +02:00

process_tampering

Merge PR #5027 from @nasbench - Promote older rules status from experimental to test

2024-10-01 14:56:09 +02:00

raw_access_thread

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

registry

Merge PR #5405 from @MalGamy12 - Update COM Object Hijacking Via Modification Of Default System CLSID Default Value

2025-05-20 23:11:14 +02:00

sysmon

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00

wmi_event

Merge PR #4950 from @nasbench - Comply With v2 Spec Changes

2024-08-12 12:02:50 +02:00