Code

Import SigmaHQ auditd rules#1194

Code

Open

buixor wants to merge 26 commits intomastercrowdsecurity/hub:masterfrom auditd_sigmacrowdsecurity/hub:auditd_sigmaCopy head branch name to clipboard

+881-60

Commits

Commits on Dec 13, 2024

• add EXECVE support, change old syscall+execve generated log type

  buixor

  committed
  e1df296

  Copy full SHA for e1df296

• reflect change on log_type for syscall+execve

  buixor

  committed
  0891dc4

  Copy full SHA for 0891dc4

• Update index

  actions-user

  committed
  9d3c8d7

  Copy full SHA for 9d3c8d7

Commits on Dec 17, 2024

• update

  buixor

  committed
  c4bd5ea

  Copy full SHA for c4bd5ea

• evolve parser

  buixor

  committed
  d950939

  Copy full SHA for d950939

Commits on Dec 18, 2024

• support new items

  buixor

  committed
  bfa138c

  Copy full SHA for bfa138c

• update collection

  buixor

  committed
  0734647

  Copy full SHA for 0734647

• add new scenarios add associated tests

  buixor

  committed
  9994a05

  Copy full SHA for 9994a05

• Update index

  actions-user

  committed
  1c3feb0

  Copy full SHA for 1c3feb0

• Merge branch 'master' into auditd_sigma

  buixor

  authored
  6280086

  Copy full SHA for 6280086

• Update taxonomy

  actions-user

  committed
  896a71e

  Copy full SHA for 896a71e

• oopsie debug

  buixor

  committed
  1de45fc

  Copy full SHA for 1de45fc

• Update index

  actions-user

  committed
  c45b845

  Copy full SHA for c45b845

• fix tests

  buixor

  committed
  52cea5e

  Copy full SHA for 52cea5e

• Update index

  actions-user

  committed
  51e0946

  Copy full SHA for 51e0946

• debug mode

  buixor

  committed
  1f8c7a5

  Copy full SHA for 1f8c7a5

• Update index

  actions-user

  committed
  018cff4

  Copy full SHA for 018cff4

• reflect changes on laurel and associated tests

  buixor

  committed
  e1dbfc8

  Copy full SHA for e1dbfc8

• Update index

  actions-user

  committed
  9a62b8e

  Copy full SHA for 9a62b8e

• fix sigmahq tests

  buixor

  committed
  4d2d8fd

  Copy full SHA for 4d2d8fd

Commits on Dec 30, 2024

• fix comments, add test

  buixor

  committed
  e624671

  Copy full SHA for e624671

• Update index

  actions-user

  committed
  a47edd0

  Copy full SHA for a47edd0

• fix parser

  buixor

  committed
  8ef1d56

  Copy full SHA for 8ef1d56

• Update index

  actions-user

  committed
  d7c3bb4

  Copy full SHA for d7c3bb4

• debug

  buixor

  committed
  be52d45

  Copy full SHA for be52d45

• Update index

  actions-user

  committed
  5ec3010

  Copy full SHA for 5ec3010