Workflow runs · quadrantsec/sagan-rules · GitHub

Actions

All workflows

Actions

Loading...
Loading

Showing runs from all workflows

167 workflow runs

167 workflow runs

Track a key the engine can supply on three correlations Validate Sagan Legacy Rules #168: Pull request #733 opened by NRGLine4Sec

12s NRGLine4Sec:fix/unbound-username-tracking

NRGLine4Sec:fix/unbound-username-tracking

12s

Merge pull request #728 from NRGLine4Sec/fix/quote-inside-pcre Validate Sagan Legacy Rules #167: Commit 11cd925 pushed by CGoggins56

13s main

main

13s

Merge pull request #731 from NRGLine4Sec/fix/json-contains-with-argum… Validate Sagan Legacy Rules #166: Commit ebd0dd2 pushed by CGoggins56

9s main

main

9s

Merge pull request #730 from NRGLine4Sec/fix/misplaced-json-contains Validate Sagan Legacy Rules #165: Commit 623028f pushed by CGoggins56

10s main

main

10s

Merge pull request #729 from NRGLine4Sec/fix/array-marker-in-json-key Validate Sagan Legacy Rules #164: Commit 17a00d5 pushed by CGoggins56

9s main

main

9s

Merge pull request #723 from NRGLine4Sec/fix/comma-inside-meta-template Validate Sagan Legacy Rules #163: Commit f879059 pushed by CGoggins56

9s main

main

9s

Give sid 5007209 the condition its json_contains was meant to be Validate Sagan Legacy Rules #162: Pull request #731 opened by NRGLine4Sec

12s NRGLine4Sec:fix/json-contains-with-arguments

NRGLine4Sec:fix/json-contains-with-arguments

12s

Spell the modifier json_meta_contains on sid 5017897 Validate Sagan Legacy Rules #161: Pull request #730 opened by NRGLine4Sec

9s NRGLine4Sec:fix/misplaced-json-contains

NRGLine4Sec:fix/misplaced-json-contains

9s

Drop the array marker and use json_meta_contains on sid 5004770 Validate Sagan Legacy Rules #160: Pull request #729 opened by NRGLine4Sec

11s NRGLine4Sec:fix/array-marker-in-json-key

NRGLine4Sec:fix/array-marker-in-json-key

11s

Write the quote as \x22 in twelve pcre patterns Validate Sagan Legacy Rules #159: Pull request #728 opened by NRGLine4Sec

13s NRGLine4Sec:fix/quote-inside-pcre

NRGLine4Sec:fix/quote-inside-pcre

13s

Move the comma out of the meta_content template on four sysmon rules Validate Sagan Legacy Rules #158: Pull request #723 synchronize by NRGLine4Sec

9s NRGLine4Sec:fix/comma-inside-meta-template

NRGLine4Sec:fix/comma-inside-meta-template

9s

Merge pull request #722 from NRGLine4Sec/fix/quoted-value-in-meta-list Validate Sagan Legacy Rules #157: Commit cab835c pushed by CGoggins56

9s main

main

9s

Merge pull request #721 from NRGLine4Sec/fix/dead-header-conditions Validate Sagan Legacy Rules #156: Commit 079dc4e pushed by CGoggins56

13s main

main

13s

Merge pull request #719 from NRGLine4Sec/fix/tcp-header-never-matches… Validate Sagan Legacy Rules #155: Commit e528f88 pushed by CGoggins56

8s main

main

8s

Merge pull request #727 from GeekCharmiing/feature/defender-powershell Validate Sagan Legacy Rules #154: Commit a82d2be pushed by CGoggins56

9s main

main

9s

Defender and Powershell rule adjustments 9/9/2026 Validate Sagan Legacy Rules #153: Pull request #727 opened by GeekCharmiing

12s GeekCharmiing:feature/defender-powershell

GeekCharmiing:feature/defender-powershell

12s

Merge pull request #726 from GeekCharmiing/fix/5017050-quarantine-use… Validate Sagan Legacy Rules #152: Commit deb40a8 pushed by CGoggins56

10s main

main

10s

fix(crowdstrike): track quarantine-file suppression by username, not src Validate Sagan Legacy Rules #151: Pull request #726 opened by GeekCharmiing

14s GeekCharmiing:fix/5017050-quarantine-username-threshold

GeekCharmiing:fix/5017050-quarantine-username-threshold

14s

Merge pull request #720 from NRGLine4Sec/fix/missing-semicolon-after-… Validate Sagan Legacy Rules #150: Commit 121fb28 pushed by CGoggins56

13s main

main

13s

Merge pull request #718 from NRGLine4Sec/fix/unterminated-hex-in-content Validate Sagan Legacy Rules #149: Commit bc17d19 pushed by CGoggins56

10s main

main

10s

Merge pull request #714 from NRGLine4Sec/fix/invalid-tracking-key-by-tag Validate Sagan Legacy Rules #148: Commit 3e389e8 pushed by CGoggins56

12s main

main

12s

Merge pull request #716 from NRGLine4Sec/fix/colon-truncation-in-meta… Validate Sagan Legacy Rules #147: Commit ef41ff7 pushed by CGoggins56

12s main

main

12s

Merge pull request #715 from NRGLine4Sec/fix/mistyped-username-tracki… Validate Sagan Legacy Rules #146: Commit d872290 pushed by CGoggins56

10s main

main

10s

Merge pull request #725 from GeekCharmiing/feature/disable5017062 Validate Sagan Legacy Rules #145: Commit 2f5ac83 pushed by CGoggins56

46s main

main

46s

Disabled rule 5017062 Validate Sagan Legacy Rules #144: Pull request #725 opened by GeekCharmiing

13s GeekCharmiing:feature/disable5017062

GeekCharmiing:feature/disable5017062

13s