Discussions: SigmaHQ/sigma

Discussions

• 1

  🙏

  Question regarding proxy_cobalt_malformed_uas

  orionova asked Jun 14, 2022 in Q&A · Unanswered

  

  

  0
• 1

  🙏

  How to request permission to contribute to the Sigma rules for azure

  Corissalea asked May 24, 2022 in Q&A · Answered

  

  

  1
• 1

  💡

  Dev new backend for sigmac

  nNipsx-Sec started May 19, 2022 in Ideas

  

  

  1
• 3

  💬

  Managing a ruleset aligned with Sigma repository

  raomin started May 11, 2022 in General

  

  

  

  

  3
• 1

  💡

  Case sensitive Elastic/ELK

  amjcyber started May 10, 2022 in Ideas

  

  

  1
• 1

  🙏

  Bad translation of rule (I guess?)

  gpedras asked Apr 29, 2022 in Q&A · Answered

  

  

  1
• 2

  💡

  Ruleset translation for Wazuh

  n0rthl1ght started Apr 22, 2022 in Ideas

  

  

  0
• 1

  💬

  This rule is a troll

  MaxChri started Apr 18, 2022 in General

  

  

  1
• 1

  💬

  New category file_access

  redsand started Apr 13, 2022 in General

  

  

  

  

  5
• 1

  💬

  Null modified date in recent commit

  isstabb started Mar 30, 2022 in General

  

  

  0
• 1

  💬

  Split registry_event category

  frack113 started Mar 26, 2022 in General

  

  

  5
• 1

  💬

  Logsource Cleanup

  Neo23x0 started Mar 21, 2022 in General

  

  

  

  

  11
• 1

  🙏

  no zeek/suricata target then why there are config files of suricata and zeek rule files in the directory?

  IamTenacious asked Mar 10, 2022 in Q&A · Answered

  

  

  1
• 2

  💬

  Normalization of rule names

  frack113 started Feb 19, 2022 in General

  

  

  

  

  6
• 1

  🙏

  Does SIGMAC enable converting to SIGMA from supported backends?

  wbnod asked Feb 4, 2022 in Q&A · Answered

  

  

  

  

  3
• 1

  💬

  Should we move the "other" into "builtin" folder?

  Neo23x0 started Jan 20, 2022 in General

  

  

  

  

  4
• 3

  🙏

  Using Process Name instead of Image

  lolbins asked Jan 19, 2022 in Q&A · Unanswered

  

  

  0
• 3

  💡

  Add generic/windows-services.yml

  frack113 started Jan 15, 2022 in Ideas

  

  

  0
• 1

  🙏

  Sigma base fields that work for all vendors

  esikuriansky asked Jan 12, 2022 in Q&A · Unanswered

  

  

  1
• 1

  💡

  Suggestion for Rules Directed at PowerShell

  austinsonger started Dec 20, 2021 in Ideas

  

  

  2
• 1

  🙏

  Auditbeat use and Problems

  robrankin asked Nov 25, 2021 in Q&A · Unanswered

  

  

  0
• 1

  💡

  Add new status "deprecated" for obsoletes rules

  frack113 started Oct 21, 2021 in Ideas

  

  

  

  

  6
• 1

  🙏

  Error while using sigmac

  dmange3190 asked Oct 29, 2021 in Q&A · Answered

  

  

  1
• 1

  💬

  Any Sigmac mapping for product supporting TCP JSON stream

  Tomasuh started Oct 12, 2021 in General

  

  

  1
• 3

  💡

  Tags: CVE Tags

  Neo23x0 started Oct 14, 2021 in Ideas

  

  

  1