Code

Import SigmaHQ auditd rules#1194

Code

Open

buixor wants to merge 26 commits intomastercrowdsecurity/hub:masterfrom auditd_sigmacrowdsecurity/hub:auditd_sigmaCopy head branch name to clipboard

+881-60

Commits

Commits on Dec 13, 2024

• add EXECVE support, change old syscall+execve generated log type

  buixor

  committed
  e1df296

• reflect change on log_type for syscall+execve

  buixor

  committed
  0891dc4

• Update index

  actions-user

  committed
  9d3c8d7

Commits on Dec 17, 2024

• update

  buixor

  committed
  c4bd5ea

• evolve parser

  buixor

  committed
  d950939

Commits on Dec 18, 2024

• support new items

  buixor

  committed
  bfa138c

• update collection

  buixor

  committed
  0734647

• add new scenarios add associated tests

  buixor

  committed
  9994a05

• Update index

  actions-user

  committed
  1c3feb0

• Merge branch 'master' into auditd_sigma

  buixor

  authored
  6280086

• Update taxonomy

  actions-user

  committed
  896a71e

• oopsie debug

  buixor

  committed
  1de45fc

• Update index

  actions-user

  committed
  c45b845

• fix tests

  buixor

  committed
  52cea5e

• Update index

  actions-user

  committed
  51e0946

• debug mode

  buixor

  committed
  1f8c7a5

• Update index

  actions-user

  committed
  018cff4

• reflect changes on laurel and associated tests

  buixor

  committed
  e1dbfc8

• Update index

  actions-user

  committed
  9a62b8e

• fix sigmahq tests

  buixor

  committed
  4d2d8fd

Commits on Dec 30, 2024

• fix comments, add test

  buixor

  committed
  e624671

• Update index

  actions-user

  committed
  a47edd0

• fix parser

  buixor

  committed
  8ef1d56

• Update index

  actions-user

  committed
  d7c3bb4

• debug

  buixor

  committed
  be52d45

• Update index

  actions-user

  committed
  5ec3010