Skip to content

Actions: SigmaHQ/sigma

Actions

Sigma Rule Tests

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
sigma-test.yml
2,310 workflow runs
2,310 workflow runs

Filter by Event

Filter by Status

Filter by Branch

Filter by Actor

fix: NSIS install using $TEMP are flags matching rules Sigma Rule Tests #16017: Pull request #5152 opened by Ti-R
January 3, 2025 21:36 Action required Ti-R:ti-r/fix_Suspicious_Volume_Shadow_Copy_Vsstrace.dll_Load_on_nsis_install
Ti-R:ti-r/fix_Suspicious_Volume_Shadow_Copy_Vsstrace.dll_Load_on_nsis_install
January 3, 2025 21:36 Action required
Create proc_creation_win_remote_access_tools_anydesk_set_password_via_cli.yml Sigma Rule Tests #16016: Pull request #5143 synchronize by DanielKoifman
January 2, 2025 07:50 2m 54s DanielKoifman:proc_creation_win_remote_access_tools_anydesk_set_password_via_cli
DanielKoifman:proc_creation_win_remote_access_tools_anydesk_set_password_via_cli
January 2, 2025 07:50 2m 54s
Create proc_creation_win_remote_access_tools_anydesk_set_password_via_cli.yml Sigma Rule Tests #16015: Pull request #5143 synchronize by DanielKoifman
January 2, 2025 07:47 1m 43s DanielKoifman:proc_creation_win_remote_access_tools_anydesk_set_password_via_cli
DanielKoifman:proc_creation_win_remote_access_tools_anydesk_set_password_via_cli
January 2, 2025 07:47 1m 43s
Reg.exe Detections added Sigma Rule Tests #16014: Pull request #5135 synchronize by gbL2k
January 1, 2025 22:15 Action required gbL2k:regexedetections
gbL2k:regexedetections
January 1, 2025 22:15 Action required
Update proc_creation_win_reg_windows_defender_tamper.yml Sigma Rule Tests #16013: Pull request #5148 opened by MalGamy12
December 31, 2024 11:19 3m 1s MalGamy12:patch-12
MalGamy12:patch-12
December 31, 2024 11:19 3m 1s
Create new rule - Potential SSH Tunnel Persistence Install Using A Scheduled Task Sigma Rule Tests #16012: Pull request #5146 opened by resp404nse
December 30, 2024 13:11 Action required resp404nse:new-ssh-persistance
resp404nse:new-ssh-persistance
December 30, 2024 13:11 Action required
Create proc_creation_win_reg_add_AutoAdminLogon_key.yml Sigma Rule Tests #16011: Pull request #5053 synchronize by Mahir-Ali-khan
December 30, 2024 04:53 31s Mahir-Ali-khan:patch-2
Mahir-Ali-khan:patch-2
December 30, 2024 04:53 31s
Merge PR #5145 from @djlukic - Update Regex of some rules Sigma Rule Tests #16010: Commit fa68da9 pushed by nasbench
December 28, 2024 21:40 2m 58s master
master
December 28, 2024 21:40 2m 58s
Regex improvement on Powershell rules Sigma Rule Tests #16009: Pull request #5145 synchronize by djlukic
December 28, 2024 18:07 2m 52s djlukic:ps_regex_fix
djlukic:ps_regex_fix
December 28, 2024 18:07 2m 52s
Regex improvement on Powershell rules Sigma Rule Tests #16008: Pull request #5145 synchronize by djlukic
December 27, 2024 16:23 2m 53s djlukic:ps_regex_fix
djlukic:ps_regex_fix
December 27, 2024 16:23 2m 53s
Merge PR #5144 from @djlukic - Fix multiple FPs Sigma Rule Tests #16007: Commit 1df3c34 pushed by nasbench
December 27, 2024 15:38 2m 54s master
master
December 27, 2024 15:38 2m 54s
Regex improvement on Powershell rules Sigma Rule Tests #16006: Pull request #5145 synchronize by nasbench
December 27, 2024 15:34 2m 55s djlukic:ps_regex_fix
djlukic:ps_regex_fix
December 27, 2024 15:34 2m 55s
Regex improvement on Powershell rules Sigma Rule Tests #16005: Pull request #5145 opened by djlukic
December 27, 2024 11:38 2m 56s djlukic:ps_regex_fix
djlukic:ps_regex_fix
December 27, 2024 11:38 2m 56s
FP filters for legitimate events Sigma Rule Tests #16004: Pull request #5144 synchronize by djlukic
December 26, 2024 14:29 2m 55s djlukic:dec24_fp_fixes
djlukic:dec24_fp_fixes
December 26, 2024 14:29 2m 55s
FP filters for legitimate events Sigma Rule Tests #16003: Pull request #5144 synchronize by djlukic
December 26, 2024 14:18 29s djlukic:dec24_fp_fixes
djlukic:dec24_fp_fixes
December 26, 2024 14:18 29s
FP filters for legitimate events Sigma Rule Tests #16002: Pull request #5144 synchronize by djlukic
December 26, 2024 14:14 31s djlukic:dec24_fp_fixes
djlukic:dec24_fp_fixes
December 26, 2024 14:14 31s
FP filters for legitimate events Sigma Rule Tests #16001: Pull request #5144 synchronize by djlukic
December 25, 2024 09:53 2m 55s djlukic:dec24_fp_fixes
djlukic:dec24_fp_fixes
December 25, 2024 09:53 2m 55s
FP filters for legitimate events Sigma Rule Tests #16000: Pull request #5144 opened by djlukic
December 25, 2024 09:47 2m 56s djlukic:dec24_fp_fixes
djlukic:dec24_fp_fixes
December 25, 2024 09:47 2m 56s
Create proc_creation_win_remote_access_tools_anydesk_set_password_via_cli.yml Sigma Rule Tests #15999: Pull request #5143 opened by DanielKoifman
December 25, 2024 06:58 Action required DanielKoifman:proc_creation_win_remote_access_tools_anydesk_set_password_via_cli
DanielKoifman:proc_creation_win_remote_access_tools_anydesk_set_password_via_cli
December 25, 2024 06:58 Action required
Update proc_creation_win_findstr_security_keyword_lookup.yml Sigma Rule Tests #15998: Pull request #5140 opened by MalGamy12
December 24, 2024 00:10 3m 1s MalGamy12:patch-11
MalGamy12:patch-11
December 24, 2024 00:10 3m 1s
Update proc_creation_win_susp_service_tamper.yml Sigma Rule Tests #15996: Pull request #5138 opened by DanielKoifman
December 23, 2024 11:24 3m 4s DanielKoifman:proc_creation_win_susp_service_tamper
DanielKoifman:proc_creation_win_susp_service_tamper
December 23, 2024 11:24 3m 4s
Update proc_creation_win_susp_service_tamper.yml Sigma Rule Tests #15991: Pull request #5109 synchronize by DanielKoifman
December 23, 2024 10:55 Action required DanielKoifman:master
DanielKoifman:master
December 23, 2024 10:55 Action required
Update proc_creation_win_susp_service_tamper.yml Sigma Rule Tests #15990: Pull request #5109 synchronize by DanielKoifman
December 23, 2024 10:47 Action required DanielKoifman:master
DanielKoifman:master
December 23, 2024 10:47 Action required
Update proc_creation_win_susp_service_tamper.yml Sigma Rule Tests #15989: Pull request #5109 synchronize by DanielKoifman
December 23, 2024 09:53 Action required DanielKoifman:master
DanielKoifman:master
December 23, 2024 09:53 Action required
Lnx auditd user discovery Sigma Rule Tests #15988: Pull request #5129 synchronize by CheraghiMilad
December 22, 2024 15:58 3m 1s CheraghiMilad:lnx_auditd_user_discovery
CheraghiMilad:lnx_auditd_user_discovery
December 22, 2024 15:58 3m 1s