Add CVE-2025-24985 detection rule

Open douglasrose75 opened this issue 8 months ago • 1 comments

Summary of the Pull Request

Changelog

Example Log Event

Fixed Issues

SigmaHQ Rule Creation Conventions

If your PR adds new rules, please consider following and applying these conventions

Apr 23 '25 15:04 douglasrose75

Hi, The file path "CVE_2025_24985/detect_vhd_mount.yml" is invalid and the workflow can not be done. It has to be "rules-emerging-threats/2025/Exploits/CVE_2025_24985/detect_vhd_mount.yml"

Can you change it ? Thanks

$frack113 avatar$ May 31 '25 16:05 frack113

Closing this as stale

Oct 19 '25 09:10 nasbench