Skip to content

Actions: rabbitstack/fibratus

Actions

pr

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
pr.yml
375 workflow runs
375 workflow runs

Filter by Event

Filter by Status

Filter by Branch

Filter by Actor

fix(rules): Eliminate false positives and harden rules pr #987: Pull request #646 synchronize by rabbitstack
23m 27s tune-false-positives
tune-false-positives
23m 27s
fix(rules): Eliminate false positives and harden rules pr #986: Pull request #646 synchronize by rabbitstack
17m 51s tune-false-positives
tune-false-positives
17m 51s
fix(rules): Eliminate false positives and harden rules pr #985: Pull request #646 opened by rabbitstack
24m 20s tune-false-positives
tune-false-positives
24m 20s
perf(symbolizer): Query live modules once pr #984: Pull request #640 synchronize by rabbitstack
11m 47s symbolizer-enum-modules-once
symbolizer-enum-modules-once
11m 47s
feat(rules): New Process execution from remote memory section rule pr #983: Pull request #580 synchronize by rabbitstack
15m 13s process-execution-from-remote-memory-section
process-execution-from-remote-memory-section
15m 13s
feat(rules): New Suspicious activity from a reflected process rule pr #982: Pull request #598 synchronize by rabbitstack
14m 39s suspicious-activity-from-reflected-process
suspicious-activity-from-reflected-process
14m 39s
feat(rules): New UAC bypass via NTFS junction DLL hijacking rule pr #981: Pull request #625 synchronize by rabbitstack
24m 0s privilege_escalation_uac_bypass_via_ntfs_junction_dll_hijacking
privilege_escalation_uac_bypass_via_ntfs_junction_dll_hijacking
24m 0s
perf(symbolizer): Query live modules once pr #980: Pull request #640 synchronize by rabbitstack
24m 36s symbolizer-enum-modules-once
symbolizer-enum-modules-once
24m 36s
perf(symbolizer): Cache unsuccessful debug help resolutions pr #979: Pull request #642 opened by rabbitstack
20m 57s cache-unsuccessful-debug-help-symbol-resolutions
cache-unsuccessful-debug-help-symbol-resolutions
20m 57s
perf(symbolizer): Query live modules once pr #978: Pull request #640 opened by rabbitstack
16m 43s symbolizer-enum-modules-once
symbolizer-enum-modules-once
16m 43s
fix(accessor): Ignore System process PE parsing pr #977: Pull request #639 synchronize by rabbitstack
28m 35s ignore-system-proc-pe-parsing
ignore-system-proc-pe-parsing
28m 35s
fix(yara): Address ADS scanning leftovers pr #976: Pull request #641 opened by rabbitstack
17m 57s yara-ads-read-leftover
yara-ads-read-leftover
17m 57s
fix(accessor): Ignore System process PE parsing pr #975: Pull request #639 opened by rabbitstack
21m 33s ignore-system-proc-pe-parsing
ignore-system-proc-pe-parsing
21m 33s
refactor(rules): Improve Activity from unhooked NTDLL module rule pr #974: Pull request #638 opened by rabbitstack
15m 58s improve-activity-from-unhooked-ntdll-module-rule
improve-activity-from-unhooked-ntdll-module-rule
15m 58s
fix(systray): Distinguish between behaviour and YARA notifications pr #973: Pull request #637 opened by rabbitstack
4m 16s systray-yara-alert-title
systray-yara-alert-title
4m 16s
perf(etw): Increase default max buffers pr #972: Pull request #636 opened by rabbitstack
16m 34s increase-default-max-session-buffers
increase-default-max-session-buffers
16m 34s
fix(loldrivers): Use overlapped I/O to read driver blob pr #971: Pull request #635 opened by rabbitstack
27m 39s use-overlapped-io-for-loldrivers-eval
use-overlapped-io-for-loldrivers-eval
27m 39s
feat(ci): Enable benchmark jobs pr #970: Pull request #634 synchronize by rabbitstack
14m 53s benchmark-github-action
benchmark-github-action
14m 53s
feat(ci): Enable benchmark jobs pr #969: Pull request #634 opened by rabbitstack
16m 0s benchmark-github-action
benchmark-github-action
16m 0s
chore(build): Define max parallelism for PR runs pr #968: Pull request #633 opened by rabbitstack
19m 38s define-max-parallelism-pr
define-max-parallelism-pr
19m 38s
perf(rule_engine): Read file data via overlapped I/O pr #967: Pull request #632 synchronize by rabbitstack
14m 15s read-file-with-timeout
read-file-with-timeout
14m 15s
perf(rule_engine): Read file data via overlapped I/O pr #966: Pull request #632 synchronize by rabbitstack
12m 12s read-file-with-timeout
read-file-with-timeout
12m 12s
perf(rule_engine): Read file data via overlapped I/O pr #965: Pull request #632 opened by rabbitstack
17m 53s read-file-with-timeout
read-file-with-timeout
17m 53s
fix(processor): Correct unbounded registry values slice growth pr #964: Pull request #631 opened by rabbitstack
29m 30s refactor-registry-value-stitching
refactor-registry-value-stitching
29m 30s
fix(rule_engine): Enforce temporal monotonicity pr #963: Pull request #630 synchronize by rabbitstack
21m 50s enforce-event-monotonicity
enforce-event-monotonicity
21m 50s