Skip to content

Actions: SigmaHQ/sigma

Actions

PR Labeler Workflow

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
pr-labeler.yml
635 workflow runs
635 workflow runs

Filter by Event

⌥ + click/return to exclude

Filter by Status

⌥ + click/return to exclude

Filter by Branch

⌥ + click/return to exclude

Filter by Actor

⌥ + click/return to exclude
Add detection for remote thread creation targeting explorer.exe PR Labeler Workflow #1345: Pull request #6189 opened by mugheeskhan5
10s
10s
Typo in proxy_exploit_cve_2023_36884_office_windows_html_rce_extenstion_ip_pattern_traffic.yml PR Labeler Workflow #1344: Pull request #6188 opened by epuni
17m 34s
17m 34s
new: Suspicious Bpftool State Modification PR Labeler Workflow #1343: Pull request #6187 opened by Char0n1507
7s
7s
new: SSH Authorized Keys Modification PR Labeler Workflow #1342: Pull request #6186 opened by Char0n1507
11s
11s
Fix BITS transfer rule filename PR Labeler Workflow #1341: Pull request #6185 opened by hantaee22
8s
8s
Add CrashStealer macOS Detection Rules PR Labeler Workflow #1340: Pull request #6184 opened by warlocksmurf
17s
17s
Add PamStealer macOS Detection Rules PR Labeler Workflow #1339: Pull request #6183 opened by warlocksmurf
12s
12s
fix(posh_ps_create_local_user): add ADSI/WinNT local user creation detection PR Labeler Workflow #1338: Pull request #6182 opened by Char0n1507
9s
9s
Add macOS Keychain password retrieval detection PR Labeler Workflow #1337: Pull request #6181 opened by JasonPhang98
9s
9s
fix: macOS network service scanning filter matches any 'l', not the netcat listen flag PR Labeler Workflow #1336: Pull request #6180 opened by munzzyy
11s
11s
new: suspicious user agent detected in SharePoint request PR Labeler Workflow #1335: Pull request #6179 opened by swachchhanda000
8s
8s
Application Firewall Disabled Via Socketfilterfw PR Labeler Workflow #1334: Pull request #6178 opened by Gerrrt
12s
12s
Add macOS suspicious UI process termination rule PR Labeler Workflow #1333: Pull request #6177 opened by JasonPhang98
10s
10s
Add NTUSER.MAN Persistence and HiveSwarming Detection Rules PR Labeler Workflow #1332: Pull request #6176 opened by Nullbyte0x
7s
7s
update: add new crypto mining pools to the list of known domains PR Labeler Workflow #1331: Pull request #6175 opened by chrialonso
8s
8s
Add docker socket access via curl or wget PR Labeler Workflow #1330: Pull request #6174 opened by Gerrrt
7s
7s
Add gobygo.net to net_dns_external_service_interaction_domains PR Labeler Workflow #1329: Pull request #6173 opened by darses
8s
8s
new rule - LuaJit Malware PR Labeler Workflow #1328: Pull request #6172 opened by joshnck
7s
7s
feat: Add French error description in Sysmon Configuration Error PR Labeler Workflow #1327: Pull request #6171 opened by gregorywychowaniec-zt
9s
9s
new: legacyhive indicators PR Labeler Workflow #1326: Pull request #6169 opened by swachchhanda000
11s
11s
add sigma rules for Windows Sandbox PR Labeler Workflow #1325: Pull request #6168 opened by unrooted
9s
9s
Typo in proc_creation_win_office_susp_child_processes.yml PR Labeler Workflow #1324: Pull request #6167 opened by chrialonso
8s
8s
feat: Add PUA - TruffleHog Execution macOS rule PR Labeler Workflow #1323: Pull request #6166 opened by Breakingpoint608
11s
11s
feat: Add Python One-Liners with Base64 Decoding macOS rule PR Labeler Workflow #1322: Pull request #6165 opened by Breakingpoint608
7s
7s
new: Suspicious Hidden Password Prompt Via Osascript PR Labeler Workflow #1321: Pull request #6164 opened by IsThisRitika
10s
10s