issues
search
Velocidex
/
velociraptor-sigma-rules
A Compiler from Sigma rules to VQL
7
stars
3
forks
source link
issues
Newest
Newest
Most commented
Recently updated
Oldest
Least commented
Least recently updated
Keep better track of rejected rules.
#34
scudette
closed
4 months ago
0
Add specialized parsing to powershell classic events
#33
scudette
closed
4 months ago
0
`Sigma.Windows.Hayabusa.Rule: PwSh Engine Started` rule's Details fields value is `null`
#32
fukusuket
closed
4 months ago
2
Added an ignore list for bad rules.
#31
scudette
closed
4 months ago
0
Some `Sigma.Windows.Hayabusa.Rule` rules does not detect logs(`Hayabusa v2.15.0` and `Velociraptor v0.72`)
#30
fukusuket
closed
4 months ago
15
Update to match CuratedSigma artifact changes
#29
predictiple
closed
4 months ago
0
Update search index
#28
scudette
closed
4 months ago
0
Sync Hayabusa Rules
#27
scudette
closed
4 months ago
0
Synced the Hayabusa events rules
#26
scudette
closed
4 months ago
0
Support rules without a condition.
#25
scudette
closed
5 months ago
0
Some `Sigma.Windows.Hayabusa.Rule` rules does not detect logs
#24
fukusuket
closed
4 months ago
15
Added per log source verification.
#23
scudette
closed
5 months ago
0
Fixed typo in import paths for hayabusa
#22
scudette
closed
5 months ago
0
`Sigma.Windows.Hayabusa.Rules` has no `process_creation` rule for `Sysmon EventID 1`
#21
fukusuket
closed
5 months ago
3
Hayabusa rules that include fields alias cannot detect logs correctly
#20
fukusuket
closed
6 months ago
6
Fixed the logsource bug within the curated list
#19
bmcder02
closed
6 months ago
0
Add Field Mappings to Log Sources
#18
bmcder02
closed
6 months ago
0
Created server artifact for post processing
#17
bmcder02
closed
7 months ago
0
Integer field are not parsed inside the Details field
#16
ablescia
closed
6 months ago
7
Ci config checker
#15
bmcder02
closed
7 months ago
0
Split field mappings into per source groups
#14
scudette
closed
5 months ago
0
Update Event config for streaming results.
#13
bmcder02
closed
7 months ago
0
Limit rendering of search results to 50 items
#12
scudette
closed
7 months ago
0
Add a searchbar to the curated rules.
#11
bmcder02
closed
7 months ago
0
Fixed typo.
#10
bmcder02
closed
8 months ago
0
Moving rules locally
#9
bmcder02
closed
7 months ago
0
Fixed template expansion bug
#8
scudette
closed
9 months ago
0
artifact_set function error after update
#7
tr0mb1r
closed
9 months ago
1
Build the ChopChopGo packacge
#6
scudette
closed
9 months ago
0
Initial Commit of Linux based Sigma rules.
#5
scudette
closed
9 months ago
0
Added a blog post describing Sigma in Velociraptor
#4
scudette
closed
10 months ago
0
Added sigma event monitoring artifact
#3
scudette
closed
10 months ago
0
Add a site
#2
scudette
closed
10 months ago
0
Fully developed a working sigma artifact
#1
scudette
closed
10 months ago
0