Add detection rules for CISA/NSA/FBI advisory AA26-194A (FSB Center 16 router config theft via SNMP/TFTP) #5350
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Greet First-Time Contributors | |
| on: | |
| pull_request_target: | |
| types: | |
| - opened | |
| issues: | |
| types: | |
| - opened | |
| permissions: | |
| issues: write | |
| pull-requests: write | |
| jobs: | |
| greeting: | |
| name: Greet First-Time Contributors | |
| if: github.event_name == 'issues' || (github.event_name == 'pull_request_target' && github.event.pull_request.head.repo.full_name != github.repository) | |
| runs-on: ubuntu-latest | |
| steps: | |
| # Reverted from actions/first-interaction@v3 back to v1 due to a known upstream bug | |
| # where all contributors are greeted (not just first-timers) in repos with GitHub | |
| # Issues disabled, because isFirstIssue() always returns true in that case. | |
| # See: https://github.com/actions/first-interaction/issues/369 | |
| - uses: actions/first-interaction@34f15e814fe48ac9312ccf29db4e74fa767cbab7 # v1.3.0 | |
| with: | |
| repo-token: ${{ secrets.GITHUB_TOKEN }} | |
| issue-message: | | |
| Welcome @${{ github.actor }} :wave: | |
| It looks like this is your first issue on the Sigma rules repository! | |
| The following repository accepts issues related to `false positives` or `rule ideas`. | |
| If you're reporting an issue related to the pySigma library please consider submitting it [here](https://github.com/SigmaHQ/pySigma) | |
| Thanks for taking the time to open this issue, and welcome to the Sigma community! :smiley: | |
| If you want to engage more with the community for official support, general discussions or announcements: | |
| 👉 [Join our Discord server](https://discord.gg/CZhaX3ygdt) | |
| pr-message: | | |
| Welcome @${{ github.actor }} :wave: | |
| It looks like this is your first pull request on the Sigma rules repository! | |
| Please read the [SigmaHQ conventions](https://github.com/SigmaHQ/sigma-specification/blob/main/sigmahq/) to ensure your contribution adheres to best practices and includes all the necessary elements for a successful review. | |
| Also check [CONTRIBUTING.md](https://github.com/SigmaHQ/sigma/blob/main/CONTRIBUTING.md) for more information on how to contribute to the Sigma rules repository, specifically proper testing and validation of your rules. | |
| Thanks again, and welcome to the Sigma community! :smiley: | |
| If you want to engage more with the community for official support, general discussions or announcements: | |
| 👉 [Join our Discord server](https://discord.gg/CZhaX3ygdt) |