-
-
Notifications
You must be signed in to change notification settings - Fork 2.3k
Pull requests: SigmaHQ/sigma
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
Add correlation rules from AT project
Rules
Windows
Pull request add/update windows related rules
#5415
opened May 13, 2025 by
tonifef
Loading…
Indirect Command Execution via SFTP ProxyCommand
Rules
Windows
Pull request add/update windows related rules
#5414
opened May 13, 2025 by
swachchhanda000
Loading…
feat: Mshta suspicious files Execution
Rules
Windows
Pull request add/update windows related rules
#5413
opened May 12, 2025 by
swachchhanda000
Loading…
feat: Add more susp registry modifications associated with feature change of windows internal tools
Rules
Windows
Pull request add/update windows related rules
#5412
opened May 12, 2025 by
swachchhanda000
Loading…
Add rule: Office Macro Phishing Initial Access detection
Duplicate
Rules
Windows
Pull request add/update windows related rules
#5411
opened May 10, 2025 by
arjun-tarakesh
Loading…
Fix: image_load/image_load_susp_unsigned_dll: simplify and use valid statu…
Rules
Windows
Pull request add/update windows related rules
#5410
opened May 8, 2025 by
Ti-R
Loading…
New rule to detect suspicious login activity within Google Workspace
Rules
#5409
opened May 7, 2025 by
Luke57
Loading…
New Rule to create file_event_win_creation_deno.yml
Rules
Windows
Pull request add/update windows related rules
#5407
opened May 6, 2025 by
joshnck
Loading…
Update registry_set_persistence_com_hijacking_builtin.yml
Ready to Merge
Rules
Windows
Pull request add/update windows related rules
#5405
opened May 5, 2025 by
MalGamy12
Loading…
Export deprecated rules in JSON
Maintenance
Related to additions and update of the repository features
Ready to Merge
Rules
#5402
opened May 4, 2025 by
ariel-anieli
Loading…
Add more keys concerned with lsa ppl protection
Ready to Merge
Rules
Windows
Pull request add/update windows related rules
#5399
opened May 1, 2025 by
swachchhanda000
Loading…
Promote Older Rules From
experimental
to test
Ready to Merge
#5397
opened May 1, 2025 by
github-actions
bot
Loading…
Updating mitre tags for 18 rules
Ready to Merge
Rules
Windows
Pull request add/update windows related rules
#5395
opened Apr 30, 2025 by
david-syk
Loading…
Updating some vmware rules to match mitre V17
Linux
Pull request add/update linux related rules
Rules
Work In Progress
Some changes are needed
#5393
opened Apr 30, 2025 by
Koifman
Loading…
Add CVE-2025-24054 Library-MS creation rule
Emerging-Threats
Rules
#5391
opened Apr 29, 2025 by
gkazimiarovich
Loading…
Adding additional mitre tags for 9 rules
Linux
Pull request add/update linux related rules
MacOS
Pull request add/update macos related rules
Ready to Merge
Rules
Windows
Pull request add/update windows related rules
#5390
opened Apr 28, 2025 by
david-syk
Loading…
Adding additional mitre tags for 13 rules
Linux
Pull request add/update linux related rules
Ready to Merge
Rules
Windows
Pull request add/update windows related rules
#5389
opened Apr 28, 2025 by
david-syk
Loading…
Adding additional mitre tags for 8 rules
Linux
Pull request add/update linux related rules
MacOS
Pull request add/update macos related rules
Ready to Merge
Rules
Windows
Pull request add/update windows related rules
#5388
opened Apr 28, 2025 by
david-syk
Loading…
feat: SAP Netweaver CVE-2025-31324 Potential Exploitation
2nd Review Needed
PR need a second approval
Emerging-Threats
Rules
#5387
opened Apr 28, 2025 by
swachchhanda000
Loading…
Added new tool for recording audio - ecasound
Linux
Pull request add/update linux related rules
Ready to Merge
Rules
#5385
opened Apr 26, 2025 by
CheraghiMilad
Loading…
Add New Rules
Emerging-Threats
Rules
Windows
Pull request add/update windows related rules
Work In Progress
Some changes are needed
Previous Next
ProTip!
What’s not been updated in a month: updated:<2025-04-13.