14 matches found
Sigma-Rule-for-CVE-2021-22005-scanning-activity
This repository does not have a README...
MiniPlasma-Detection
MiniPlasma Detection CVE-2020-17103 Sigma detection rule for MiniPlasma, a Windows local privilege escalation exploit abusing a race condition in cldflt.sys to hijack the windir environment variable for the SYSTEM account, redirecting the WER QueueReporting scheduled task to execute an attacker...
CVE-2025-29927-Sigma-Rule
CVE-2025-29927 Report Overview CVE-2025-29927 is a security vulnerability in Next.js middleware, allowing attackers to bypass authentication by modifying specific HTTP headers. Exploitation Attackers can send a request with the header x-middleware-subrequest: middleware to bypass authentication...
WELA
WELA Windows Event Log Analyzer ゑ羅 A tool for auditing Windows event log settings. Created by Yamato Security — make sure you are actually recording the events that matter for DFIR. 📖 Read the Documentation → Available in 15 languages — English · 日本語 · 繁體中文 · 한국어 · Deutsch · Türkçe · Français ·...
DFIRHub
DFIRHub DFIRHub is a reference for Windows forensic artifacts. It lists the KAPE targets from Eric Zimmerman's KapeFiles repository, shows what each one collects, and gives you the command to run. It also converts Sigma rules into queries for your SIEM. What it does You can search artifacts by...
Multi-Stage-Exploitation-and-Detection-Engineering-Analysis-of-CVE-2023-34362-in-MOVEit-Transfer
CVE-2023-34362 MOVEit Transfer Vulnerability Analysis Project Overview This repository contains an academic technical analysis of CVE-2023-34362, a critical SQL injection vulnerability affecting MOVEit Transfer. The project was prepared for CYB625 – Ethical Hacking & Penetration Testing. Importan...
Sigma-Rule-for-CVE-2022-30190
This repository does not have a README...
Sigma-Rule-for-CVE-2021-40438-exploitation-attempt
This repository does not have a README...
My-Sigma-Rule-Collection
Collection of Sigma Rules That I Created From Research I found interesting Overview This repository contains a collection of custom Sigma rules I've created/found based on vulnerabilities, threat reports, and techniques I found interesting. Each rule includes references, detection logic, and...
CVE-2023-24488-SIEM-Sigma-Rule
Sigma Rule: Detection of Pre-Auth XSS CVE-2023-24488 Detect Citrix Gateway Pre-Auth XSS CVE-2023-24488 vulnerability exploitation attempts. This Sigma rule looks for XSS attack patterns in the postlogoutredirecturi query parameter. Rule Description The provided Sigma rule is designed to identify...
Sigma-Rule-for-CVE-2021-41773-and-CVE-2021-42013-exploitation-attempt
This repository does not have a README...
Exploit for SQL Injection in Progress Moveit_Cloud
CVE-2023-34362 MOVEit Transfer Vulnerability Analysis Proj...