Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: wagga40/Zircolite
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: 2.30.1
Choose a base ref
...
head repository: wagga40/Zircolite
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: 2.40.0
Choose a head ref
  • 14 commits
  • 34 files changed
  • 3 contributors

Commits on Nov 1, 2024

  1. Bump version

    wagga40 authored Nov 1, 2024
    Configuration menu
    Copy the full SHA
    958c1be View commit details
    Browse the repository at this point in the history

Commits on Jan 3, 2025

  1. Configuration menu
    Copy the full SHA
    ad1c276 View commit details
    Browse the repository at this point in the history
  2. Merge pull request #98 from cridin1/patch-1

    Update Detection Rule License link on README.md
    wagga40 authored Jan 3, 2025
    Configuration menu
    Copy the full SHA
    12fe430 View commit details
    Browse the repository at this point in the history

Commits on Feb 2, 2025

  1. Update README.md

    wagga40 authored Feb 2, 2025
    Configuration menu
    Copy the full SHA
    2f7baf6 View commit details
    Browse the repository at this point in the history
  2. Configuration menu
    Copy the full SHA
    51e51ab View commit details
    Browse the repository at this point in the history
  3. Update zircolite.py

    wagga40 authored Feb 2, 2025
    Configuration menu
    Copy the full SHA
    d72c041 View commit details
    Browse the repository at this point in the history
  4. Configuration menu
    Copy the full SHA
    1fc59ff View commit details
    Browse the repository at this point in the history
  5. Update rulesets

    wagga40 committed Feb 2, 2025
    Configuration menu
    Copy the full SHA
    4d75b5c View commit details
    Browse the repository at this point in the history

Commits on Feb 3, 2025

  1. If multiple rule files are specified, invalid JSON output is created …

    …if we have hits from each file because the self.first_json_output is currently created in the scope of executeRuleset which is called for each rule file, meaning that we create JSON output with missing comma's between alerts. This fix scopes first_json_output at the class level and fixes the issue.
    wmetcalf committed Feb 3, 2025
    Configuration menu
    Copy the full SHA
    c5bc142 View commit details
    Browse the repository at this point in the history

Commits on Feb 4, 2025

  1. Merge pull request #100 from wmetcalf/FixUpFirstJsonScopeHandling

    Fix for invalid JSON output (variable scoping), when we specify multiple rule files, and have hits from multiple rule files.
    wagga40 authored Feb 4, 2025
    Configuration menu
    Copy the full SHA
    a1c535b View commit details
    Browse the repository at this point in the history

Commits on Mar 30, 2025

  1. Update Dockerfile, Readme and rules

    Update evtx_dump binaries
    Remove forwarding
    Bump version to 2.40
    wagga40 committed Mar 30, 2025
    Configuration menu
    Copy the full SHA
    e497c94 View commit details
    Browse the repository at this point in the history
  2. Configuration menu
    Copy the full SHA
    80adf39 View commit details
    Browse the repository at this point in the history
  3. Configuration menu
    Copy the full SHA
    d2b421b View commit details
    Browse the repository at this point in the history

Commits on Apr 6, 2025

  1. Add taskfile (https://taskfile.dev/)

    Refactor some functions
    wagga40 committed Apr 6, 2025
    Configuration menu
    Copy the full SHA
    edfc67c View commit details
    Browse the repository at this point in the history
Loading