{"payload":{"feedbackUrl":"https://github.com/orgs/community/discussions/53140","repo":{"id":446721298,"defaultBranch":"main","name":"Sigma_rules","ownerLogin":"tsale","currentUserCanPush":false,"isFork":false,"isEmpty":false,"createdAt":"2022-01-11T07:34:37.000Z","ownerAvatar":"https://avatars.githubusercontent.com/u/25332397?v=4","public":true,"private":false,"isOrgOwned":false},"refInfo":{"name":"","listCacheKey":"v0:1701241521.0","currentOid":""},"activityList":{"items":[{"before":"c411bf6e15409218fdd6ed0b7fc930230bbeb027","after":"d669502792510e5e68574a4cda3f6a7eb9d8c421","ref":"refs/heads/main","pushedAt":"2024-01-27T04:59:16.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"tsale","name":"Kostas","path":"/tsale","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/25332397?s=80&v=4"},"commit":{"message":"Forgot to add references 🤦‍♂️","shortMessageHtmlLink":"Forgot to add references 🤦‍♂️"}},{"before":"87658440eeac34ddccee7fb42edda9d5f269d9ac","after":"c411bf6e15409218fdd6ed0b7fc930230bbeb027","ref":"refs/heads/main","pushedAt":"2024-01-27T04:51:15.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"tsale","name":"Kostas","path":"/tsale","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/25332397?s=80&v=4"},"commit":{"message":"Added cheap rule for soaphound detection","shortMessageHtmlLink":"Added cheap rule for soaphound detection"}},{"before":"b23f0949a8fc2f834bfb724bda7676ec6ca9f2ba","after":"87658440eeac34ddccee7fb42edda9d5f269d9ac","ref":"refs/heads/main","pushedAt":"2024-01-27T04:30:49.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"tsale","name":"Kostas","path":"/tsale","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/25332397?s=80&v=4"},"commit":{"message":"Added ADWS abuse rule","shortMessageHtmlLink":"Added ADWS abuse rule"}},{"before":"1b30e4599c696f7de97bcec766f931bd489fcd3d","after":null,"ref":"refs/heads/tsale-patch-3","pushedAt":"2023-11-29T07:05:21.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"tsale","name":"Kostas","path":"/tsale","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/25332397?s=80&v=4"}},{"before":"c80ee0f82e1d6d7d410a75f2b22f5c526482fa3d","after":"b23f0949a8fc2f834bfb724bda7676ec6ca9f2ba","ref":"refs/heads/main","pushedAt":"2023-11-29T07:05:17.000Z","pushType":"pr_merge","commitsCount":2,"pusher":{"login":"tsale","name":"Kostas","path":"/tsale","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/25332397?s=80&v=4"},"commit":{"message":"Merge pull request #6 from tsale/tsale-patch-3\n\nUpdate devdrv_bypass_fsutil.yml","shortMessageHtmlLink":"Merge pull request <a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2015949363\" data-permission-text=\"Title is private\" data-url=\"https://github.com/tsale/Sigma_rules/issues/6\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/tsale/Sigma_rules/pull/6/hovercard\" href=\"https://github.com/tsale/Sigma_rules/pull/6\">#6</a> from tsale/tsale-patch-3"}},{"before":null,"after":"1b30e4599c696f7de97bcec766f931bd489fcd3d","ref":"refs/heads/tsale-patch-3","pushedAt":"2023-11-29T07:04:52.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"tsale","name":"Kostas","path":"/tsale","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/25332397?s=80&v=4"},"commit":{"message":"Update devdrv_bypass_fsutil.yml\n\nFixing typo based on #5","shortMessageHtmlLink":"Update devdrv_bypass_fsutil.yml"}},{"before":"af857b4968accf28d2021242499da63a36c32a89","after":"c80ee0f82e1d6d7d410a75f2b22f5c526482fa3d","ref":"refs/heads/main","pushedAt":"2023-11-06T06:35:28.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"tsale","name":"Kostas","path":"/tsale","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/25332397?s=80&v=4"},"commit":{"message":"Update devdrv_bypass_fsutil.yml","shortMessageHtmlLink":"Update devdrv_bypass_fsutil.yml"}},{"before":"0d0341a2e62a776dadcdacf9e1125f7a76c25ec8","after":"af857b4968accf28d2021242499da63a36c32a89","ref":"refs/heads/main","pushedAt":"2023-11-05T20:55:33.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"tsale","name":"Kostas","path":"/tsale","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/25332397?s=80&v=4"},"commit":{"message":"Update devdrv_bypass_fsutil.yml","shortMessageHtmlLink":"Update devdrv_bypass_fsutil.yml"}},{"before":"1cb62f8f7913e0975f2b69cc7e4a8065c2206cfe","after":"0d0341a2e62a776dadcdacf9e1125f7a76c25ec8","ref":"refs/heads/main","pushedAt":"2023-11-05T20:55:22.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"tsale","name":"Kostas","path":"/tsale","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/25332397?s=80&v=4"},"commit":{"message":"Update devdrv_bypass_registry.yml","shortMessageHtmlLink":"Update devdrv_bypass_registry.yml"}},{"before":null,"after":"a569679155c46fe6570c0829ab85d08361417c6b","ref":"refs/heads/tsale-patch-2","pushedAt":"2023-11-05T20:55:10.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"tsale","name":"Kostas","path":"/tsale","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/25332397?s=80&v=4"},"commit":{"message":"Update devdrv_bypass_registry.yml","shortMessageHtmlLink":"Update devdrv_bypass_registry.yml"}},{"before":null,"after":"001ebb44a06ad9f6c263ef3e804548fe4c12b966","ref":"refs/heads/tsale-patch-1","pushedAt":"2023-11-05T20:55:00.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"tsale","name":"Kostas","path":"/tsale","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/25332397?s=80&v=4"},"commit":{"message":"Update devdrv_bypass_fsutil.yml","shortMessageHtmlLink":"Update devdrv_bypass_fsutil.yml"}},{"before":"9faf09fc4c84e666531669c5ba25c994ac68edc5","after":"1cb62f8f7913e0975f2b69cc7e4a8065c2206cfe","ref":"refs/heads/main","pushedAt":"2023-11-05T20:53:22.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"tsale","name":"Kostas","path":"/tsale","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/25332397?s=80&v=4"},"commit":{"message":"New rule - devdrv av bypass","shortMessageHtmlLink":"New rule - devdrv av bypass"}},{"before":"b21523dcc8a0e459656577286a4d1167a1936be7","after":"9faf09fc4c84e666531669c5ba25c994ac68edc5","ref":"refs/heads/main","pushedAt":"2023-10-26T20:40:44.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"tsale","name":"Kostas","path":"/tsale","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/25332397?s=80&v=4"},"commit":{"message":"Moving new rule to correct folder","shortMessageHtmlLink":"Moving new rule to correct folder"}},{"before":"2e44f0ad426d932b1a06bb404ee8b1daca93e019","after":"b21523dcc8a0e459656577286a4d1167a1936be7","ref":"refs/heads/main","pushedAt":"2023-10-26T20:39:17.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"tsale","name":"Kostas","path":"/tsale","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/25332397?s=80&v=4"},"commit":{"message":"New rule","shortMessageHtmlLink":"New rule"}},{"before":"fd3735b27a9a742f1e8c132e29527cc12f5f9215","after":null,"ref":"refs/heads/tsale-patch-1","pushedAt":"2023-09-13T20:39:02.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"tsale","name":"Kostas","path":"/tsale","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/25332397?s=80&v=4"}},{"before":"38f35aed16a114123667aaac48bc484f27b0bf77","after":null,"ref":"refs/heads/tsale-patch-2","pushedAt":"2023-09-13T20:38:59.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"tsale","name":"Kostas","path":"/tsale","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/25332397?s=80&v=4"}},{"before":"d41e6879a8d2e664abb080fb3f012eafd605805e","after":"2e44f0ad426d932b1a06bb404ee8b1daca93e019","ref":"refs/heads/main","pushedAt":"2023-09-13T20:38:19.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"tsale","name":"Kostas","path":"/tsale","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/25332397?s=80&v=4"},"commit":{"message":"Update appcmd.yml","shortMessageHtmlLink":"Update appcmd.yml"}},{"before":null,"after":"38f35aed16a114123667aaac48bc484f27b0bf77","ref":"refs/heads/tsale-patch-2","pushedAt":"2023-09-13T20:38:00.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"tsale","name":"Kostas","path":"/tsale","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/25332397?s=80&v=4"},"commit":{"message":"Update appcmd.yml","shortMessageHtmlLink":"Update appcmd.yml"}},{"before":"439c69aef943d9694adae9f8f4f263931384b689","after":"d41e6879a8d2e664abb080fb3f012eafd605805e","ref":"refs/heads/main","pushedAt":"2023-09-05T03:23:03.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"tsale","name":"Kostas","path":"/tsale","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/25332397?s=80&v=4"},"commit":{"message":"Update appcmd.yml","shortMessageHtmlLink":"Update appcmd.yml"}},{"before":null,"after":"fd3735b27a9a742f1e8c132e29527cc12f5f9215","ref":"refs/heads/tsale-patch-1","pushedAt":"2023-09-05T03:22:07.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"tsale","name":"Kostas","path":"/tsale","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/25332397?s=80&v=4"},"commit":{"message":"Update appcmd.yml","shortMessageHtmlLink":"Update appcmd.yml"}},{"before":"60406b45c33f4fb45daecc5b528ee98dc23a9e1c","after":"439c69aef943d9694adae9f8f4f263931384b689","ref":"refs/heads/main","pushedAt":"2023-09-05T02:54:56.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"tsale","name":"Kostas","path":"/tsale","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/25332397?s=80&v=4"},"commit":{"message":"New rule: appcmd","shortMessageHtmlLink":"New rule: appcmd"}},{"before":"37bf1754b0b1265465540fceda4d78c47804e77f","after":"60406b45c33f4fb45daecc5b528ee98dc23a9e1c","ref":"refs/heads/main","pushedAt":"2023-08-24T04:43:03.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"tsale","name":"Kostas","path":"/tsale","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/25332397?s=80&v=4"},"commit":{"message":"Update pythonfunctionwarnings_disabled.yml\n\nTypo","shortMessageHtmlLink":"Update pythonfunctionwarnings_disabled.yml"}},{"before":"277716924f8c38f35e82ca76899c150d2991d57a","after":"37bf1754b0b1265465540fceda4d78c47804e77f","ref":"refs/heads/main","pushedAt":"2023-08-22T22:46:13.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"tsale","name":"Kostas","path":"/tsale","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/25332397?s=80&v=4"},"commit":{"message":"Update pythonfunctionwarnings_disabled.yml\n\nEdited Mitre ATT&CK tag","shortMessageHtmlLink":"Update pythonfunctionwarnings_disabled.yml"}},{"before":"16072c3ad6c87a7a2b4f5676908110e92688bfa8","after":"277716924f8c38f35e82ca76899c150d2991d57a","ref":"refs/heads/main","pushedAt":"2023-08-22T22:34:10.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"tsale","name":"Kostas","path":"/tsale","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/25332397?s=80&v=4"},"commit":{"message":"New rules","shortMessageHtmlLink":"New rules"}},{"before":"fb339f3d596e4f4303f5edc6096f5bfac100324f","after":"16072c3ad6c87a7a2b4f5676908110e92688bfa8","ref":"refs/heads/main","pushedAt":"2023-08-10T22:13:37.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"tsale","name":"Kostas","path":"/tsale","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/25332397?s=80&v=4"},"commit":{"message":"LOLBIN CMSTP - new rule","shortMessageHtmlLink":"LOLBIN CMSTP - new rule"}},{"before":"450d0d880c8b5c27a48db6121fa94de359d0ddb5","after":"fb339f3d596e4f4303f5edc6096f5bfac100324f","ref":"refs/heads/main","pushedAt":"2023-08-08T06:34:09.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"tsale","name":"Kostas","path":"/tsale","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/25332397?s=80&v=4"},"commit":{"message":"New GuLoader rule","shortMessageHtmlLink":"New GuLoader rule"}},{"before":"d5b4a09418edfeeb3a2d654f556d5bca82003cd7","after":"450d0d880c8b5c27a48db6121fa94de359d0ddb5","ref":"refs/heads/main","pushedAt":"2023-07-17T07:11:23.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"tsale","name":"Kostas","path":"/tsale","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/25332397?s=80&v=4"},"commit":{"message":"Added new rules from based on an Ursnif intrusion","shortMessageHtmlLink":"Added new rules from based on an Ursnif intrusion"}},{"before":"eeccb8b1fa772346fb3ec81efc6e480ea2ea5e2c","after":"d5b4a09418edfeeb3a2d654f556d5bca82003cd7","ref":"refs/heads/main","pushedAt":"2023-07-12T22:33:58.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"tsale","name":"Kostas","path":"/tsale","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/25332397?s=80&v=4"},"commit":{"message":"Fixing errors","shortMessageHtmlLink":"Fixing errors"}},{"before":"3f5988cced433a716206d7fbde7a920e05611467","after":"eeccb8b1fa772346fb3ec81efc6e480ea2ea5e2c","ref":"refs/heads/main","pushedAt":"2023-07-12T22:28:24.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"tsale","name":"Kostas","path":"/tsale","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/25332397?s=80&v=4"},"commit":{"message":"Update VSDiagnostics_LoLBin.yml","shortMessageHtmlLink":"Update VSDiagnostics_LoLBin.yml"}},{"before":"6639346aefe01d7438cd236fcd6e3c160e164bf6","after":"3f5988cced433a716206d7fbde7a920e05611467","ref":"refs/heads/main","pushedAt":"2023-07-12T22:24:41.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"tsale","name":"Kostas","path":"/tsale","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/25332397?s=80&v=4"},"commit":{"message":"Added VSDiagnostics LOLBIN","shortMessageHtmlLink":"Added VSDiagnostics LOLBIN"}}],"hasNextPage":true,"hasPreviousPage":false,"activityType":"all","actor":null,"timePeriod":"all","sort":"DESC","perPage":30,"cursor":"djE6ks8AAAAD6miJ5gA","startCursor":null,"endCursor":null}},"title":"Activity · tsale/Sigma_rules"}