Skip to content

Pull requests: SigmaHQ/sigma

New pull request New
81 Open 4,756 Closed
81 Open 4,756 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

Fix rule to detect downloads via CertReq Rules Windows Pull request add/update windows related rules
#5727 opened Oct 27, 2025 by RiqTam Loading… Sigma-November-Release
@nasbench
1
1 new rule, 1 modification of older rule Review Needed The PR requires review Rules Windows Pull request add/update windows related rules
#5725 opened Oct 27, 2025 by Koifman Loading… Sigma-November-Release
@nasbench
2
Update: DNS Query to External Service Interaction Domains - additional domains and filter Review Needed The PR requires review Rules
#5724 opened Oct 26, 2025 by darses Loading… Sigma-November-Release
@nasbench
1
Create win_trusted_for_delegation_rights.yml Rules Windows Pull request add/update windows related rules
#5723 opened Oct 24, 2025 by ShujiTsushima Loading…
Create enumeration_with_bloodhound_on_dc.yml Rules Windows Pull request add/update windows related rules
#5721 opened Oct 23, 2025 by ShujiTsushima Loading…
2
Fix #5603 2nd Review Needed PR need a second approval Rules Windows Pull request add/update windows related rules
#5720 opened Oct 22, 2025 by nasbench Loading… Sigma-October-Release
1
5
Add Regression Tests and Simulation Links - First Batch Maintenance Related to additions and update of the repository features Rules Windows Pull request add/update windows related rules
#5719 opened Oct 22, 2025 by nasbench • Draft Sigma-November-Release
2
New rules related to recent reported ransom group activity (The Gentlemen) Rules Windows Pull request add/update windows related rules
#5717 opened Oct 22, 2025 by tropChaud Loading…
Add detection rules for abuse of OpenEDR's response features Rules Windows Pull request add/update windows related rules
#5716 opened Oct 22, 2025 by tsale Loading…
2
feat: add AWS TruffleHog PUA detection rule 2nd Review Needed PR need a second approval Rules
#5711 opened Oct 21, 2025 by swachchhanda000 Loading… Sigma-October-Release
1
Fix remaining issues 2nd Review Needed PR need a second approval Rules Windows Pull request add/update windows related rules
#5708 opened Oct 19, 2025 by nasbench Loading… Sigma-October-Release
4
6
Add New Detection Rules for Grixba Malware Reconnaissance Activities Author Input Required changes the require information from original author of the rules Rules Windows Pull request add/update windows related rules Work In Progress Some changes are needed
#5707 opened Oct 19, 2025 by YxinMiracle Loading…
3
Merge PR #5706 from @swachchhanda000 - update PFX File Creation 2nd Review Needed PR need a second approval Awaiting Requested Review A review was requested from one of the maintainers Rules Windows Pull request add/update windows related rules
#5706 opened Oct 19, 2025 by swachchhanda000 Loading… Sigma-October-Release
1
4
macOS process create detections related to Bluenoroff macOS intrusion MacOS Pull request add/update macos related rules Rules
#5700 opened Oct 17, 2025 by stuartjash Loading…
1
add detection rule for suspicious use of BrowserCore.exe in PRT extra… Author Input Required changes the require information from original author of the rules Rules Windows Pull request add/update windows related rules Work In Progress Some changes are needed
#5676 opened Oct 3, 2025 by e0909 Loading…
10
Hunting rules for Hex Staging Attack and HTML Phishing Attachment 2nd Review Needed PR need a second approval Author Input Required changes the require information from original author of the rules Rules Windows Pull request add/update windows related rules
#5674 opened Oct 2, 2025 by skaynum Loading…
27
Adding persistence and curl data exfil for AMOS and renaming of folder to Atomic MacOS Stealer Additional Data Needed Author Input Required changes the require information from original author of the rules Emerging-Threats Rules Work In Progress Some changes are needed
#5669 opened Oct 2, 2025 by JasonPhang98 Loading…
11
Wsl rules Additional Data Needed Author Input Required changes the require information from original author of the rules Rules Windows Pull request add/update windows related rules
#5668 opened Oct 1, 2025 by Liran017 Loading…
12
feat: add detection for CVE-2025-20333 and CVE-2025-20362 Emerging-Threats Rules
#5662 opened Sep 27, 2025 by swachchhanda000 Loading…
4
Disable ASLR Protection 2nd Review Needed PR need a second approval Linux Pull request add/update linux related rules Rules
#5661 opened Sep 26, 2025 by CheraghiMilad Loading… Sigma-October-Release
6
feat: ppl protected lsass dump via wsass.exe Rules Windows Pull request add/update windows related rules
#5652 opened Sep 16, 2025 by swachchhanda000 Loading…
@nasbench
5
feat: goldendMSA attack 2nd Review Needed PR need a second approval Rules Windows Pull request add/update windows related rules
#5646 opened Sep 11, 2025 by swachchhanda000 Loading…
7
feat: susp service priv esc and phantom hijack rules Review Needed The PR requires review Rules Windows Pull request add/update windows related rules
#5643 opened Sep 8, 2025 by swachchhanda000 Loading…
8
added new technique 2nd Review Needed PR need a second approval Linux Pull request add/update linux related rules Rules
#5634 opened Aug 28, 2025 by CheraghiMilad Loading… Sigma-October-Release
5
Added new linux rule 2nd Review Needed PR need a second approval Additional Data Needed Linux Pull request add/update linux related rules Rules
#5627 opened Aug 25, 2025 by tsale Loading… Sigma-October-Release
32
ProTip! Exclude everything labeled bug with -label:bug.