Commits

Branch selector

 master

User selector

All users

Datepicker

All time

Commit History

Commits on Sep 3, 2024

• Update README.md

  Show description for 357fd55
  RandomRhythm

  authored
  357fd55

  Copy full SHA for 357fd55

Commits on Feb 18, 2023

• https://www.randomsecurityblog.com/2023/02/iis-logs-and-unexpected-quote.html

  Show description for bbdcf00
  RandomRhythm

  committed
  bbdcf00

  Copy full SHA for bbdcf00

Commits on Nov 3, 2022

• Add MicrosoftIIS arg

  RandomRhythm

  authored
  e44d9e5

  Copy full SHA for e44d9e5

Commits on Sep 17, 2022

• fix boolIIS arg

  RandomRhythm

  authored
  16c12d0

  Copy full SHA for 16c12d0

Commits on Mar 16, 2022

• Merge pull request #1 from RandomRhythm/IIS_dev

  Show description for 88391c1
  RandomRhythm

  authored
  88391c1

  Copy full SHA for 88391c1

• Fixes from IIS changes

  Show description for a3ca5fa
  RandomRhythm

  authored
  a3ca5fa

  Copy full SHA for a3ca5fa

Commits on Mar 10, 2022

• Changes to improve IIS log parsing:

  Show description for a5c47fd
  RandomRhythm

  committed
  a5c47fd

  Copy full SHA for a5c47fd

• remove begining line regex when processing IIS. Handle subfolders common with IIS logs.

  Show description for 2501f74
  RandomRhythm

  committed
  2501f74

  Copy full SHA for 2501f74

Commits on Dec 15, 2021

• log4j exploit regex

  Show description for a623cb2
  RandomRhythm

  committed
  a623cb2

  Copy full SHA for a623cb2

• Seperate IDS detection logging from SuspiciousLineFound. IDS will now process even when suspicious formatting is found.

  Show description for ef184fd
  RandomRhythm

  committed
  ef184fd

  Copy full SHA for ef184fd

Commits on Nov 13, 2021

• whitespace

  Show description for d6efb27
  RandomRhythm

  committed
  d6efb27

  Copy full SHA for d6efb27

• whitespace

  Show description for a649ef6
  RandomRhythm

  committed
  a649ef6

  Copy full SHA for a649ef6

• add external references

  Show description for 3e6fbbf
  RandomRhythm

  committed
  3e6fbbf

  Copy full SHA for 3e6fbbf

• add boolIIS #Use IIS settings (set boolExpectDefaultFormat = False and strdateFormat = "")

  Show description for 91fe565
  RandomRhythm

  committed
  91fe565

  Copy full SHA for 91fe565

Commits on Apr 15, 2021

• rule removal due to FPs

  Show description for 7cc68b0
  RandomRhythm

  committed
  7cc68b0

  Copy full SHA for 7cc68b0

• Remove part of rule 11 to limit false positives. Can add something similar to the custom filer and match against decoded data.

  Show description for 0b4153c
  RandomRhythm

  committed
  0b4153c

  Copy full SHA for 0b4153c

Commits on Apr 14, 2021

• Remove false-positive that was matching document.a

  Show description for 6b590d4
  RandomRhythm

  committed
  6b590d4

  Copy full SHA for 6b590d4

• False-positive on /)

  Show description for 9036427
  RandomRhythm

  committed
  9036427

  Copy full SHA for 9036427

Commits on Apr 10, 2021

• change description for -p argument

  Show description for 0d33bd6
  RandomRhythm

  committed
  0d33bd6

  Copy full SHA for 0d33bd6

Commits on Mar 12, 2021

• expose date output format as variable. Fix comment

  Show description for 711a138
  RandomRhythm

  committed
  711a138

  Copy full SHA for 711a138

Commits on Jun 2, 2020

• Add Web_Log_Deobfuscate back as own files and not submodule to allow to download via zip

  Show description for 29a9104
  RandomRhythm

  committed
  29a9104

  Copy full SHA for 29a9104

• remove submodule

  Show description for b0e412b
  RandomRhythm

  committed
  b0e412b

  Copy full SHA for b0e412b

Commits on May 10, 2020

• Add output and input encoding settings. Rearrange setting locations.

  Show description for b05b911
  RandomRhythm

  committed
  b05b911

  Copy full SHA for b05b911

Commits on Mar 15, 2020

• add rule 84 - Detects common comment types

  Show description for e0b10a8
  RandomRhythm

  committed
  e0b10a8

  Copy full SHA for e0b10a8

• Keep all file handles open while processing log file. Run custom IDS signatures against all log entries not already detected for suspicious activity.

  Show description for 3fd0383
  RandomRhythm

  committed
  3fd0383

  Copy full SHA for 3fd0383

Commits on Mar 8, 2020

• Update default config

  Show description for e1f5082
  RandomRhythm

  committed
  e1f5082

  Copy full SHA for e1f5082

Commits on Feb 28, 2020

• add arguments. Add support for custom_filter.json. PHPIDS rule match logging.

  RandomRhythm

  committed
  c4e64be

  Copy full SHA for c4e64be

Commits on Feb 27, 2020

• remove part of rule 23 that was generating false-positives

  Show description for 555d366
  RandomRhythm

  committed
  555d366

  Copy full SHA for 555d366

Commits on Feb 8, 2020

• Add return characters

  Show description for 693dc38
  RandomRhythm

  committed
  693dc38

  Copy full SHA for 693dc38

• initial commit

  Show description for 5f2859d
  RandomRhythm

  committed
  5f2859d

  Copy full SHA for 5f2859d

• Initial commit

  RandomRhythm

  authored
  a3a9142

  Copy full SHA for a3a9142