Skip to content

Actions: SigmaHQ/sigma

Actions

Sigma Rule Tests

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
sigma-test.yml
2,500+ workflow runs
2,500+ workflow runs

Filter by Event

⌥ + click/return to exclude

Filter by Status

⌥ + click/return to exclude

Filter by Branch

⌥ + click/return to exclude

Filter by Actor

⌥ + click/return to exclude
saakov-aws-1 Sigma Rule Tests #20562: Pull request #6042 synchronize by saakovv
2m 5s saakovv:saakov-aws-1
saakovv:saakov-aws-1
2m 5s
Add rule: HackTool - Kerbrute Execution Sigma Rule Tests #20561: Pull request #6195 opened by ashish-cybersec
Action required ashish-cybersec:detect-kerbrute-execution
ashish-cybersec:detect-kerbrute-execution
Action required
Add Moodle detection rules (web server logs) - initial coverage Sigma Rule Tests #20560: Pull request #6194 opened by sankettaware16
1m 48s sankettaware16:moodle-rules-batch1
sankettaware16:moodle-rules-batch1
1m 48s
Improved Linux local account discovery detection and false positives Sigma Rule Tests #20559: Pull request #5843 synchronize by Aadith1422
2m 7s Aadith1422:improve-linux-account-discovery
Aadith1422:improve-linux-account-discovery
2m 7s
Improved Linux local account discovery detection and false positives Sigma Rule Tests #20558: Pull request #5843 synchronize by Aadith1422
Action required Aadith1422:improve-linux-account-discovery
Aadith1422:improve-linux-account-discovery
Action required
new: suspicious user agent detected in SharePoint request Sigma Rule Tests #20557: Pull request #6179 synchronize by swachchhanda000
1m 24s swachchhanda000:sharepoint_rce
swachchhanda000:sharepoint_rce
1m 24s
new: certighost rules Sigma Rule Tests #20556: Pull request #6190 synchronize by swachchhanda000
1m 51s swachchhanda000:certighost
swachchhanda000:certighost
1m 51s
new: certighost rules Sigma Rule Tests #20555: Pull request #6190 synchronize by swachchhanda000
26s swachchhanda000:certighost
swachchhanda000:certighost
26s
Add requestrepo.com to DNS Query to External Service Interaction Domains Sigma Rule Tests #20554: Pull request #6193 synchronize by darses
2m 5s darses:patch-4
darses:patch-4
2m 5s
Add requestrepo.com to DNS Query to External Service Interaction Domains Sigma Rule Tests #20553: Pull request #6193 synchronize by darses
2m 8s darses:patch-4
darses:patch-4
2m 8s
Add requestrepo.com to DNS Query to External Service Interaction Domains Sigma Rule Tests #20552: Pull request #6193 opened by darses
28s darses:patch-4
darses:patch-4
28s
feat(windows): add ligolo-ng agent detection rules (T1572) Sigma Rule Tests #20551: Pull request #6192 opened by sebafvs
2m 14s sebafvs:feat/add-ligolo-ng-detection
sebafvs:feat/add-ligolo-ng-detection
2m 14s
new: certighost rules Sigma Rule Tests #20550: Pull request #6190 synchronize by swachchhanda000
2m 14s swachchhanda000:certighost
swachchhanda000:certighost
2m 14s
feat(windows): add Remote Registry service start detection (T1003.002) Sigma Rule Tests #20549: Pull request #6191 synchronize by sebafvs
Action required sebafvs:feat/add-remoteregistry-service-start
sebafvs:feat/add-remoteregistry-service-start
Action required
new: certighost rules Sigma Rule Tests #20548: Pull request #6190 synchronize by swachchhanda000
2m 6s swachchhanda000:certighost
swachchhanda000:certighost
2m 6s
feat(windows): add Remote Registry service start detection (T1003.002) Sigma Rule Tests #20547: Pull request #6191 opened by sebafvs
Action required sebafvs:feat/add-remoteregistry-service-start
sebafvs:feat/add-remoteregistry-service-start
Action required
new: certighost rules Sigma Rule Tests #20546: Pull request #6190 synchronize by swachchhanda000
2m 6s swachchhanda000:certighost
swachchhanda000:certighost
2m 6s
new: certighost rules Sigma Rule Tests #20545: Pull request #6190 synchronize by swachchhanda000
2m 9s swachchhanda000:certighost
swachchhanda000:certighost
2m 9s
new: certighost rules Sigma Rule Tests #20544: Pull request #6190 synchronize by swachchhanda000
1m 50s swachchhanda000:certighost
swachchhanda000:certighost
1m 50s
new: certighost rules Sigma Rule Tests #20543: Pull request #6190 opened by swachchhanda000
2m 4s swachchhanda000:certighost
swachchhanda000:certighost
2m 4s
update: Add current Acronis Cyber Protect service names to proc_creation_win_susp_service_tamper Sigma Rule Tests #20542: Pull request #6151 synchronize by xuanxuan0
Action required xuanxuan0:update-acronis-service-tamper-identifiers
xuanxuan0:update-acronis-service-tamper-identifiers
Action required
Update proc_creation_win_findstr_security_keyword_lookup.yml Sigma Rule Tests #20540: Pull request #5085 synchronize by swachchhanda000
1m 51s MalGamy12:patch-9
MalGamy12:patch-9
1m 51s
Update proc_creation_win_findstr_security_keyword_lookup.yml Sigma Rule Tests #20539: Pull request #5085 synchronize by swachchhanda000
2m 7s MalGamy12:patch-9
MalGamy12:patch-9
2m 7s
Add detection for remote thread creation targeting explorer.exe Sigma Rule Tests #20538: Pull request #6189 synchronize by mugheeskhan5
1m 40s mugheeskhan5:add-remote-thread-target-explorer
mugheeskhan5:add-remote-thread-target-explorer
1m 40s
Add detection for remote thread creation targeting explorer.exe Sigma Rule Tests #20537: Pull request #6189 opened by mugheeskhan5
2m 7s mugheeskhan5:add-remote-thread-target-explorer
mugheeskhan5:add-remote-thread-target-explorer
2m 7s