Skip to content

Actions: SigmaHQ/sigma

Actions

PR Labeler Workflow

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
pr-labeler.yml
632 workflow runs
632 workflow runs

Filter by Event

⌥ + click/return to exclude

Filter by Status

⌥ + click/return to exclude

Filter by Branch

⌥ + click/return to exclude

Filter by Actor

⌥ + click/return to exclude
chore: 🔒 restrict automated workflows to SigmaHQ org only PR Labeler Workflow #1317: Pull request #6160 opened by frack113
7s
7s
fix: rundll32 UNC path mismatch with pipename PR Labeler Workflow #1316: Pull request #6158 opened by swachchhanda000
8s
8s
Adding jscrambler npm supply chain attack detection case PR Labeler Workflow #1315: Pull request #6157 opened by thereisnobackup
30s
30s
Update Sigma CLI validation instructions in CONTRIBUTING.md PR Labeler Workflow #1314: Pull request #6156 opened by thomaspatzke
11s
11s
new: wp2shell indicators PR Labeler Workflow #1313: Pull request #6155 opened by swachchhanda000
10s
10s
Add AsyncAPI npm compromise NodeJS masquerade detections PR Labeler Workflow #1312: Pull request #6154 opened by Finn-Ashby
11s
11s
new: detect potential proxy execution via setupugc PR Labeler Workflow #1311: Pull request #6152 opened by archit15singh
6s
6s
update: Add current Acronis Cyber Protect service names to proc_creation_win_susp_service_tamper PR Labeler Workflow #1310: Pull request #6151 opened by xuanxuan0
14s
14s
new: add detection for LegacyHive (ProfSvc) exploit PR Labeler Workflow #1309: Pull request #6150 opened by ShadowSkillZ
6s
6s
new: Potential DNScat2 DNS Tunneling (network/dns) PR Labeler Workflow #1308: Pull request #6149 opened by 6ixxclixx
8s
8s
Add post-quantum / quantum-attack threat-hunting rules (PQC) [RFC] PR Labeler Workflow #1307: Pull request #6148 opened by tainians
11s
11s
Update two Rules regarding Disabled Vulnerable Driver Blocklist PR Labeler Workflow #1306: Pull request #6147 opened by Gude5
11s
11s
update: Filter service-initiated to Authentication Method Azure PR Labeler Workflow #1305: Pull request #6146 opened by gregorywychowaniec-zt
10s
10s
Add detection rules for CISA/NSA/FBI advisory AA26-194A (FSB Center 16 router config theft via SNMP/TFTP) PR Labeler Workflow #1304: Pull request #6145 opened by zachvessey16
8s
8s
Add OpenSSH TCP forwarding channel activity detection PR Labeler Workflow #1303: Pull request #6144 opened by marvalous123
8s
8s
new: WSL COM Proxy-Stub Loaded by Non-WSL Process PR Labeler Workflow #1302: Pull request #6143 opened by Thanh-WuTan
8s
8s
Add detection rule: Credentials Added To Service Principal PR Labeler Workflow #1301: Pull request #6142 opened by lmaotrip
12s
12s
Add new win process creation detection for hidden local user account PR Labeler Workflow #1300: Pull request #6140 opened by KKarishan
9s
9s
Fix false positives on Simple-Help/JWrapper in Sysmon ID 29 (#6058) PR Labeler Workflow #1299: Pull request #6139 opened by KKarishan
9s
9s
Deprecate rule adf876b3 and add broader PowerShell port discovery rule (#6132) PR Labeler Workflow #1298: Pull request #6138 opened by KKarishan
6s
6s
Update: add additional Netcat binary variants PR Labeler Workflow #1297: Pull request #6137 opened by Bit-ByteBandit
8s
8s
Fix metadata alignment on Test-NetConnection rule (#6132) PR Labeler Workflow #1296: Pull request #6136 opened by KKarishan
13s
13s
Fix false positives on Simple-Help/JWrapper in Sysmon ID 29 (#6058) PR Labeler Workflow #1295: Pull request #6135 opened by KKarishan
10s
10s
Add .NET startup hook persistence detection PR Labeler Workflow #1294: Pull request #6134 opened by BlAck9D
9s
9s
Add .NET startup hook persistence detection PR Labeler Workflow #1293: Pull request #6133 opened by BlAck9D
11s
11s