From 5c46dd63f5e4e74a0522748f887d4c4fa7f331b8 Mon Sep 17 00:00:00 2001 From: Wietze Date: Thu, 7 Apr 2022 15:50:39 +0100 Subject: [PATCH] Giving Hexacorn the proper credit --- yml/OSBinaries/Conhost.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/yml/OSBinaries/Conhost.yml b/yml/OSBinaries/Conhost.yml index 8fed6e3..7ce1d4e 100644 --- a/yml/OSBinaries/Conhost.yml +++ b/yml/OSBinaries/Conhost.yml @@ -16,8 +16,11 @@ Full_Path: Detection: - IOC: conhost.exe spawning unexpected processes Resources: + - Link: https://www.hexacorn.com/blog/2020/05/25/how-to-con-your-host/ - Link: https://twitter.com/Wietze/status/1511397781159751680 Acknowledgement: + - Person: Adam + Handle: '@hexacorn' - Person: Wietze Handle: '@wietze' ---