Skip to content

Actions: SigmaHQ/sigma

Actions

PR Labeler Workflow

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
pr-labeler.yml
634 workflow runs
634 workflow runs

Filter by Event

⌥ + click/return to exclude

Filter by Status

⌥ + click/return to exclude

Filter by Branch

⌥ + click/return to exclude

Filter by Actor

⌥ + click/return to exclude
chore: revert greetings first-interaction action to v1 PR Labeler Workflow #1220: Pull request #6045 opened by swachchhanda000
10s
10s
new: AWS SES Account Availability Discovery Via Long-Lived Access Key PR Labeler Workflow #1219: Pull request #6043 opened by marcopedrinazzi
9s
9s
saakov-aws-1 PR Labeler Workflow #1218: Pull request #6042 opened by saakovv
12s
12s
new: lsass netlogon crash cve-2026-41089 PR Labeler Workflow #1217: Pull request #6041 opened by swachchhanda000
8s
8s
new: windows discovery rules PR Labeler Workflow #1216: Pull request #6040 opened by swachchhanda000
8s
8s
New Rule - Gogs Rebase RCE Argument Injection via Git --exec Flag (Linux) PR Labeler Workflow #1215: Pull request #6039 opened by WRG-11
10s
10s
Fix eventlog clear false-positive filter scope PR Labeler Workflow #1214: Pull request #6038 opened by srkyn
14s
14s
Add 8 Windows detection rules covering persistence and credential access PR Labeler Workflow #1213: Pull request #6036 opened by srkyn
9s
9s
Add HackTool - Gogo Scanner Execution Rule PR Labeler Workflow #1212: Pull request #6035 opened by Aryu-RU
9s
9s
Add detection for Hyper-V VM forced shutdown (ransomware preparation) PR Labeler Workflow #1211: Pull request #6034 opened by viizohh
7s
7s
Add CrashFix Python RAT Execution Indicators PR Labeler Workflow #1210: Pull request #6033 opened by Aryu-RU
10s
10s
new: Potential GeoServer CVE-2024-36401 OGC Filter Evaluation Exploitation Attempt PR Labeler Workflow #1209: Pull request #6032 opened by 1392081456
10s
10s
Add detection rules for React2Shell Pre-Auth RCE (CVE-2025-55182) PR Labeler Workflow #1208: Pull request #6031 opened by gloambit
9s
9s
new: OpenAI Codex sandbox abuse detection rules PR Labeler Workflow #1207: Pull request #6030 opened by swachchhanda000
8s
8s
Add detection for NetExec credential dumping modules PR Labeler Workflow #1206: Pull request #6029 opened by viizohh
8s
8s
Add detection: BadUSB PowerShell execution via Windows Run dialog PR Labeler Workflow #1205: Pull request #6028 opened by descambiado
7s
7s
Fix false positives for OpenCode to some osascript related rules PR Labeler Workflow #1204: Pull request #6027 opened by norbert791
9s
9s
new: signed dll load with no pe metadata PR Labeler Workflow #1203: Pull request #6026 opened by swachchhanda000
10s
10s
Add Azure Entra ID identity boundary expansion rules (3 rules) PR Labeler Workflow #1202: Pull request #6025 opened by descambiado
14s
14s
Add detection: Entra ID Temporary Access Pass creation (T1556.006) PR Labeler Workflow #1201: Pull request #6024 opened by descambiado
9s
9s
new: 7 Sigma rules — ArcaneDoor / UAT-4356 Cisco ASA campaign (LINE DANCER, LINE RUNNER, LINE VIPER, FIRESTARTER) PR Labeler Workflow #1200: Pull request #6023 opened by CrunchyJohnHaven
12s
12s
NEWRULE: AbortHydration MiniPlasma Behaviour (Nightmare Eclipse) PR Labeler Workflow #1199: Pull request #6022 opened by unresolvedhost
12s
12s
Update the detection logic of Suspicious Start-Process PassThru and added the alias saps PR Labeler Workflow #1198: Pull request #6021 opened by eriknordstrm
13s
13s
New rule to detect RondoDox botnet activity PR Labeler Workflow #1197: Pull request #6020 opened by marcopedrinazzi
11s
11s
fix: reduce false positives across multiple Windows rules PR Labeler Workflow #1196: Pull request #6019 opened by swachchhanda000
8s
8s