Skip to content

Actions: SigmaHQ/sigma

Actions

PR Labeler Workflow

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
pr-labeler.yml
631 workflow runs
631 workflow runs

Filter by Event

⌥ + click/return to exclude

Filter by Status

⌥ + click/return to exclude

Filter by Branch

⌥ + click/return to exclude

Filter by Actor

⌥ + click/return to exclude
Replace legacy rule with a new one PR Labeler Workflow #1390: Pull request #6241 opened by norbert791
8s
8s
Fix renamed PowerShell detection in decryption pattern rule PR Labeler Workflow #1389: Pull request #6240 opened by khoi-arch
10s
10s
chore(tests): fix get_level in deprecated_rules and optimize test_rules execution PR Labeler Workflow #1388: Pull request #6239 opened by Shaivarth
10s
10s
Add Kerberos Pre-Authentication Disabled On A User Account PR Labeler Workflow #1387: Pull request #6238 opened by mmadersbacher
7s
7s
feat: dual-signal IDS triage (SnortML GID411 ≠ signature TP) PR Labeler Workflow #1386: Pull request #6237 opened by AAH20
8s
8s
new: closes #4542 - add rules for IFEO Debugger tampering, disabling usb storage and windowsupdate PR Labeler Workflow #1385: Pull request #6236 opened by swachchhanda000
11s
11s
update: expand sudoers file modification coverage PR Labeler Workflow #1384: Pull request #6235 opened by Haseeb-1698
11s
11s
Add macOS rule for sensitive data archived via ditto PR Labeler Workflow #1383: Pull request #6234 opened by clivoa
9s
9s
Add macOS rule for browser credential database query via a database CLI utility PR Labeler Workflow #1382: Pull request #6233 opened by clivoa
9s
9s
🧪 Add simulation sections (Atomic Red Team) to 34 registry_set rules PR Labeler Workflow #1381: Pull request #6231 opened by frack113
9s
9s
new: silent-call rules PR Labeler Workflow #1380: Pull request #6230 opened by mromanode
10s
10s
new: SSH Authorized Keys Made Immutable PR Labeler Workflow #1379: Pull request #6229 opened by marvalous123
11s
11s
new: user creation attempt via adsi PR Labeler Workflow #1378: Pull request #6228 opened by swachchhanda000
9s
9s
fix: AWS IAM Backdoor Users Keys filter using |fieldref|contains PR Labeler Workflow #1377: Pull request #6227 opened by swachchhanda000
11s
11s
docs: improve description of Sysmon File Executable Creation Detected PR Labeler Workflow #1376: Pull request #6226 opened by valmal04
8s
8s
🦺 update pySigma-validators-sigmahq to 0.21 PR Labeler Workflow #1375: Pull request #6225 opened by frack113
7s
7s
new: resetnightmare rules PR Labeler Workflow #1374: Pull request #6224 opened by swachchhanda000
9s
9s
Add: Suspicious SharePoint JWT Exploitation via Curl PR Labeler Workflow #1373: Pull request #6222 opened by mromanode
9s
9s
test: add regression data for 77 existing rules PR Labeler Workflow #1372: Pull request #6221 opened by frack113
13s
13s
posh_ps_create_local_user: cover local user creation via ADSI/WinNT provider PR Labeler Workflow #1371: Pull request #6220 opened by SkxOverKill
8s
8s
Add New ChainDrop NPM Supply-Chain Attack Rules PR Labeler Workflow #1370: Pull request #6219 opened by harshthakur6293
7s
7s
Add Git configuration command execution rules PR Labeler Workflow #1369: Pull request #6218 opened by signalblur
14s
14s
new: Command Execution via Git Ext Transport PR Labeler Workflow #1368: Pull request #6217 opened by signalblur
11s
11s
new: Mirai Telnet Scanning Detection Rule PR Labeler Workflow #1367: Pull request #6216 opened by Gideon145
10s
10s
new: Mirai Botnet C2 Heartbeat and Telnet Brute-Force Detection Rules PR Labeler Workflow #1366: Pull request #6214 opened by Gideon145
18s
18s