Skip to content

new: susp package execution#6054

Open
swachchhanda000 wants to merge 4 commits into
SigmaHQ:masterfrom
swachchhanda000:susp_package_execution
Open

new: susp package execution#6054
swachchhanda000 wants to merge 4 commits into
SigmaHQ:masterfrom
swachchhanda000:susp_package_execution

Conversation

@swachchhanda000

Copy link
Copy Markdown
Collaborator

Summary of the Pull Request

Changelog

new: Cloud Metadata Endpoint Access By Script Interpreters - Linux
new: Cloud Metadata Endpoint Access By Script Interpreters
new: GitHub Token Access Via GH CLI Spawned By Script Interpreters
new: GitHub Token Access Via GH CLI Spawned By Script Interpreters - Linux

Example Log Event

Fixed Issues

SigmaHQ Rule Creation Conventions

  • If your PR adds new rules, please consider following and applying these conventions

@github-actions github-actions Bot added Rules Review Needed The PR requires review Windows Pull request add/update windows related rules Linux Pull request add/update linux related rules labels Jun 8, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Linux Pull request add/update linux related rules Review Needed The PR requires review Rules Windows Pull request add/update windows related rules

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant