Skip to content

Pull requests: SigmaHQ/sigma

New pull request New
172 Open 5,096 Closed
172 Open 5,096 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

Add ClickLock Stealer macOS Detection Rules Emerging-Threats Review Needed The PR requires review Rules
#6200 opened Aug 3, 2026 by warlocksmurf Loading…
Add rule: HackTool - SharpSCCM Execution Review Needed The PR requires review Rules Windows Pull request add/update windows related rules
#6199 opened Aug 1, 2026 by ashish-cybersec Loading…
Update ATT&CK Heatmap Coverage
#6196 opened Aug 1, 2026 by github-actions Bot Loading…
Add rule: HackTool - Kerbrute Execution Review Needed The PR requires review Rules Windows Pull request add/update windows related rules
#6195 opened Jul 31, 2026 by ashish-cybersec Loading…
Add Moodle detection rules (web server logs) - initial coverage Review Needed The PR requires review Rules
#6194 opened Jul 31, 2026 by sankettaware16 Loading…
Add requestrepo.com to DNS Query to External Service Interaction Domains Review Needed The PR requires review Rules
#6193 opened Jul 30, 2026 by darses Contributor Loading…
1
feat(windows): add ligolo-ng agent detection rules (T1572) Review Needed The PR requires review Rules Windows Pull request add/update windows related rules
#6192 opened Jul 30, 2026 by sebafvs Loading…
feat(windows): add Remote Registry service start detection (T1003.002) Review Needed The PR requires review Rules Windows Pull request add/update windows related rules
#6191 opened Jul 30, 2026 by sebafvs Loading…
new: certighost rules Review Needed The PR requires review Rules Windows Pull request add/update windows related rules
#6190 opened Jul 30, 2026 by swachchhanda000 Collaborator Loading…
6
Add detection for remote thread creation targeting explorer.exe Review Needed The PR requires review Rules Windows Pull request add/update windows related rules
#6189 opened Jul 29, 2026 by mugheeskhan5 Loading…
Typo in proxy_exploit_cve_2023_36884_office_windows_html_rce_extenstion_ip_pattern_traffic.yml Emerging-Threats Review Needed The PR requires review Rules
#6188 opened Jul 29, 2026 by epuni Loading…
new: Suspicious Bpftool State Modification Linux Pull request add/update linux related rules Review Needed The PR requires review Rules
#6187 opened Jul 28, 2026 by Char0n1507 Loading…
new: SSH Authorized Keys Modification Linux Pull request add/update linux related rules Review Needed The PR requires review Rules
#6186 opened Jul 28, 2026 by Char0n1507 Loading…
Add CrashStealer macOS Detection Rules Additional Data Needed Author Input Required changes the require information from original author of the rules Emerging-Threats Review Needed The PR requires review Rules
#6184 opened Jul 28, 2026 by warlocksmurf Loading…
2
Add PamStealer macOS Detection Rules Author Input Required changes the require information from original author of the rules Emerging-Threats Review Needed The PR requires review Rules
#6183 opened Jul 28, 2026 by warlocksmurf Loading…
3
fix: macOS network service scanning filter matches any 'l', not the netcat listen flag Author Input Required changes the require information from original author of the rules MacOS Pull request add/update macos related rules Review Needed The PR requires review Rules
#6180 opened Jul 27, 2026 by munzzyy Contributor Loading… Sigma-August-Release-26
8
new: suspicious user agent detected in SharePoint request Review Needed The PR requires review Rules Windows Pull request add/update windows related rules
#6179 opened Jul 27, 2026 by swachchhanda000 Collaborator Loading…
Application Firewall Disabled Via Socketfilterfw MacOS Pull request add/update macos related rules Review Needed The PR requires review Rules
#6178 opened Jul 26, 2026 by Gerrrt Loading…
5
Add macOS suspicious UI process termination rule MacOS Pull request add/update macos related rules Review Needed The PR requires review Rules
#6177 opened Jul 26, 2026 by JasonPhang98 Contributor Loading…
Add NTUSER.MAN Persistence and HiveSwarming Detection Rules Review Needed The PR requires review Rules Windows Pull request add/update windows related rules
#6176 opened Jul 25, 2026 by Nullbyte0x Loading…
Add docker socket access via curl or wget Linux Pull request add/update linux related rules Review Needed The PR requires review Rules
#6174 opened Jul 23, 2026 by Gerrrt Loading…
4
new rule - LuaJit Malware Author Input Required changes the require information from original author of the rules Rules Windows Pull request add/update windows related rules
#6172 opened Jul 23, 2026 by joshnck Contributor Loading…
2
add sigma rules for Windows Sandbox Review Needed The PR requires review Rules Windows Pull request add/update windows related rules
#6168 opened Jul 23, 2026 by unrooted Loading…
1
feat: Add PUA - TruffleHog Execution macOS rule MacOS Pull request add/update macos related rules Review Needed The PR requires review Rules
#6166 opened Jul 22, 2026 by Breakingpoint608 Loading…
1 task done
feat: Add Python One-Liners with Base64 Decoding macOS rule MacOS Pull request add/update macos related rules Review Needed The PR requires review Rules
#6165 opened Jul 22, 2026 by Breakingpoint608 Loading…
1 task done
ProTip! Exclude everything labeled bug with -label:bug.