Skip to content

Issues: SigmaHQ/sigma

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Clear current search query, filters, and sorts
6 Open 38 Closed
6 Open 38 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

False-Negative: Netsh Firewall Discovery With Full Command Path Create Pull-Request issues that should be provided as a pull request False-Positive Issue reporting a false positive with one of the rules
#5171 opened Jan 25, 2025 by BalsamicSentry
@nasbench
1
Rule incorrectly identifies our driver (Topaz Systems - www.topazsystems.com) as using Windows Credential Editor Create Pull-Request issues that should be provided as a pull request False-Positive Issue reporting a false positive with one of the rules
#5170 opened Jan 24, 2025 by m1keam
@nasbench
2
Remove ending spaces from selection in posh_ps_susp_invocation_generic.yml False-Positive Issue reporting a false positive with one of the rules
#5034 opened Oct 4, 2024 by BlakeHensleyy
@nasbench
1
Wrong filter in " Kerberoasting Activity - Initial Query" rule condition? False-Positive Issue reporting a false positive with one of the rules Work In Progress Some changes are needed
#5011 opened Sep 17, 2024 by zambomarcell
@nasbench
2
Certain Windows commands include two spaces between the process and the parameters which is NOT reflected in related SIGMA rules False-Positive Issue reporting a false positive with one of the rules
#4914 opened Jul 13, 2024 by Koifman
@nasbench
7
False Detections with Invoke-Obfuscation and Null Bytes False-Positive Issue reporting a false positive with one of the rules Work In Progress Some changes are needed
#4875 opened Jun 9, 2024 by KingKDot
@nasbench
2
ProTip! Type g p on any issue or pull request to go back to the pull request listing page.