Merge remote-tracking branch 'upstream/master' into windows_11_sprint

This commit is contained in:
Wietze
2022-10-03 16:16:30 +01:00
176 changed files with 502 additions and 341 deletions

View File

@@ -22,4 +22,3 @@ Resources:
Acknowledgement:
- Person: Jimmy
Handle: '@bohops'
---

View File

@@ -1,6 +1,6 @@
---
Name: CL_Mutexverifiers.ps1
Description:
Description: Proxy execution with CL_Mutexverifiers.ps1
Author: 'Oddvar Moe'
Created: 2018-05-25
Commands:
@@ -26,4 +26,3 @@ Resources:
Acknowledgement:
- Person: Pierre-Alexandre Braeken
Handle: '@pabraeken'
---

View File

@@ -28,4 +28,3 @@ Acknowledgement:
Handle: '@bohops'
- Person: Pierre-Alexandre Braeken
Handle: '@pabraeken'
---

View File

@@ -36,4 +36,3 @@ Acknowledgement:
Handle: '@danielbohannon'
- Person: John Lambert
Handle: '@JohnLaTwC'
---

View File

@@ -1,6 +1,6 @@
---
Name: Pubprn.vbs
Description:
Description: Proxy execution with Pubprn.vbs
Author: 'Oddvar Moe'
Created: 2018-05-25
Commands:
@@ -25,4 +25,3 @@ Resources:
Acknowledgement:
- Person: Matt Nelson
Handle: '@enigma0x3'
---

View File

@@ -25,4 +25,3 @@ Acknowledgement:
Handle: '@monoxgas'
- Person: Casey Smith
Handle: '@subtee'
---

View File

@@ -16,9 +16,9 @@ Full_Path:
Code_Sample:
- Code:
Detection:
- Sigma: https://github.com/SigmaHQ/sigma/blob/0.21-688-gd172b136b/rules/windows/process_creation/proc_creation_win_lolbas_utilityfunctions.yml
Resources:
- Link: https://twitter.com/nickvangilder/status/1441003666274668546
Acknowledgement:
- Person: Nick VanGilder
Handle: '@nickvangilder'
---

View File

@@ -55,4 +55,3 @@ Acknowledgement:
Handle: '@bohops'
- Person: Red Canary Company cc Tony Lambert
Handle: '@redcanaryco'
---

View File

@@ -43,6 +43,3 @@ Acknowledgement:
Handle: '@p0w3rsh3ll'
- Person: Stamatis Chatzimangou
Handle: '@_st0pp3r_'
- Person: Stamatis Chatzimangou
Handle: '@_st0pp3r_'
---