{"push_id":1950438084,"size":1,"distinct_size":1,"ref":"refs/heads/patch-1","head":"9768f275d091b3f6734f7e1cd005a7acb1017235","before":"f3f2c14b3ab656eea5193c15658bd557273be15e","commits":[{"sha":"9768f275d091b3f6734f7e1cd005a7acb1017235","author":{"name":"secman-pl","email":"d396e3bafbad7f22a5c281545cae070a1ad5c047@secman.pl"},"message":"Update sysmon_susp_regsvr32_anomalies\n\nRule to detect COM scriptlet invocation when wscript.exe is spawned from regsvr32.exe. \r\nexample: https://www.hybrid-analysis.com/sample/f34da6d84a9663928606894fbc494cd9bf2f03c98cf0c775462802558d3a50ef?environmentId=100\r\nSCT script code:\r\nvar objShell = new ActiveXObject(\"WScript.shell\");","distinct":true,"url":"https://api.github.com/repos/secman-pl/sigma/commits/9768f275d091b3f6734f7e1cd005a7acb1017235"}]}
{"actor":{"display_login":"secman-pl"}}