Search results

Reorganize Threat-Specific Rules under rules-emerging-threats folder

Create Pull-Requestissues that should be provided as a pull requestissues that should be provided as a pull request

Emerging-Threats

Status: Open.

#5730 In SigmaHQ/sigma;

· swachchhanda000 opened on Oct 31, 2025

· 

Sigma-December-Release

Fix remaining keyword rules if any

Status: Open.

#5728 In SigmaHQ/sigma;

· nasbench opened on Oct 29, 2025

Changelog: add guid's?

Status: Open.

#5590 In SigmaHQ/sigma;

· sandervandegeijn opened on Aug 11, 2025

Enhancement on rule promotions

Status: Open.

#5422 In SigmaHQ/sigma;

· ariel-anieli opened on May 17, 2025

LDAP Nightmare (CVE-2024-49112)

Status: Open.

#5151 In SigmaHQ/sigma;

· devilman85 opened on Jan 2, 2025

Remove ending spaces from selection in posh_ps_susp_invocation_generic.yml

False-PositiveIssue reporting a false positive with one of the rulesIssue reporting a false positive with one of the rules

Status: Open.

#5034 In SigmaHQ/sigma;

· BlakeHensleyy opened on Oct 4, 2024

DNS Exfiltration rule

Work In ProgressSome changes are neededSome changes are needed

Status: Open.

#4889 In SigmaHQ/sigma;

· pramodpabbati opened on Jun 25, 2024

Suspicious Process DNS Query Known Abuse Web Services

Status: Open.

#4748 In SigmaHQ/sigma;

· cY83rR0H1t opened on Mar 1, 2024

Based on suspicious regedit changes sigma rules

Work In ProgressSome changes are neededSome changes are needed

Status: Open.

#4542 In SigmaHQ/sigma;

· ghost opened on Nov 4, 2023

Detect PowerShell w/o PowerShell Execution via RunDLL32 and various other methods

Work In ProgressSome changes are neededSome changes are needed

Status: Open.

#4197 In SigmaHQ/sigma;

· JulianDroste opened on Apr 25, 2023