-
-
Notifications
You must be signed in to change notification settings - Fork 218
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
CI test harness for detection rules against
Atomic Red TeamciAnything CI (Continuous Integration) relatedAnything CI (Continuous Integration) relatedrulesAnything related to detection rulesAnything related to detection rulesStatus: Open.#715 In rabbitstack/fibratus;Harden Fibratus against tampering
scope: harderingAnything related to hardering against tamperingAnything related to hardering against tamperingStatus: Open.#713 In rabbitstack/fibratus;Add
WMIactivity telemetryneeds: configIndicates the issue requires changes in the config file/flagsIndicates the issue requires changes in the config file/flagsscope: events/telemetryAnything related to kernel eventsAnything related to kernel eventstype: featureIntroduces a new functionalityIntroduces a new functionalityStatus: Open.#710 In rabbitstack/fibratus;Add
Win32Kinput/hooking telemetryneeds: configIndicates the issue requires changes in the config file/flagsIndicates the issue requires changes in the config file/flagsscope: events/telemetryAnything related to kernel eventsAnything related to kernel eventstype: featureIntroduces a new functionalityIntroduces a new functionalityStatus: Open.#708 In rabbitstack/fibratus;Capture
NtFsControlFilesyscall as a newFsControlFileevent typeneeds: docsIndicates that the issue needs documentation updatesIndicates that the issue needs documentation updatesscope: events/telemetryAnything related to kernel eventsAnything related to kernel eventstype: featureIntroduces a new functionalityIntroduces a new functionalityStatus: Open.#707 In rabbitstack/fibratus;Add
AMSItelemetry support via a newAmsiScanBufferevent typeneeds: configIndicates the issue requires changes in the config file/flagsIndicates the issue requires changes in the config file/flagsneeds: docsIndicates that the issue needs documentation updatesIndicates that the issue needs documentation updatesscope: events/telemetryAnything related to kernel eventsAnything related to kernel eventstype: featureIntroduces a new functionalityIntroduces a new functionalityStatus: Open.#706 In rabbitstack/fibratus;Track authentication events from the
Windows Security Auditingproviderneeds: configIndicates the issue requires changes in the config file/flagsIndicates the issue requires changes in the config file/flagsneeds: docsIndicates that the issue needs documentation updatesIndicates that the issue needs documentation updatesscope: events/telemetryAnything related to kernel eventsAnything related to kernel eventstype: featureIntroduces a new functionalityIntroduces a new functionalityStatus: Open.#705 In rabbitstack/fibratus;Make the
YARAscanner asynchronous to avoid blocking the event loopneeds: configIndicates the issue requires changes in the config file/flagsIndicates the issue requires changes in the config file/flagsscope: yaraAnything related to libyara and pattern matchingAnything related to libyara and pattern matchingStatus: Open.#704 In rabbitstack/fibratus;Publish Fibratus packages to Windows Package Manager (winget)
scope: msiAnything about MSI packagesAnything about MSI packagesStatus: Open.#645 In rabbitstack/fibratus;Publish Fibratus packages to Choco
scope: msiAnything about MSI packagesAnything about MSI packagesStatus: Open.#644 In rabbitstack/fibratus;Publish Fibratus packages to Scoop
scope: msiAnything about MSI packagesAnything about MSI packagesStatus: Open.#643 In rabbitstack/fibratus;Restrict access to config/log files
scope: configAnything related to config managementAnything related to config managementscope: harderingAnything related to hardering against tamperingAnything related to hardering against tamperingStatus: Open.#568 In rabbitstack/fibratus;