securepeacock
							
						 
					 | 
					
						
						
							
						
						1833ddd391
					 | 
					
						
						
							
							Update FsiAnyCpu.yml with Sigma (#225)
						
						
						
						
						
						
						
						* Update FsiAnyCpu.yml
* Update acknowledgement
* Update FsiAnyCpu.yml
* fix line feed issue after conflict
Co-authored-by: bohops <jimmy@jbtech.us> 
						
						
					 | 
					
						2022-12-28 23:50:51 -05:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								securepeacock
							
						 
					 | 
					
						
						
							
						
						8d35738a1f
					 | 
					
						
						
							
							Update Fsi.yml with Sigma (#226)
						
						
						
						
						
						
						
						* Update Fsi.yml
* Update acknowledgement
* Remove newline
* resolving unix lf issue with fsi
* resolving unix lf issue with fsi
* resolving fsi issue
Co-authored-by: bohops <jimmy@jbtech.us> 
						
						
					 | 
					
						2022-12-28 23:41:27 -05:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								securepeacock
							
						 
					 | 
					
						
						
							
						
						c19a2e3cf8
					 | 
					
						
						
							
							Update Remote.yml with Sigma (#227)
						
						
						
						
						
						
						
						* Update Remote.yml
* Update acknowledgement
Co-authored-by: bohops <jimmy@jbtech.us> 
						
						
					 | 
					
						2022-12-28 21:24:57 -05:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Grzegorz Tworek
							
						 
					 | 
					
						
						
							
						
						ec676cbd93
					 | 
					
						
						
							
							Create Runexehelper.yml (#269)
						
						
						
						
						
						
						
						Co-authored-by: Wietze <wietze@users.noreply.github.com> 
						
						
					 | 
					
						2022-12-17 17:30:30 +00:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Michał Kucharski
							
						 
					 | 
					
						
						
							
						
						8452c1ca96
					 | 
					
						
						
							
							Update eventvwr.yml with Execute part (#252)
						
						
						
						
						
						
						
						* Update eventvwr.yml with Execute part
All things added based on https://twitter.com/orange_8361/status/1518970259868626944 and my re-tests.
* Update Eventvwr.yml
As asked by @bohops
* Update Eventvwr.yml 
						
						
					 | 
					
						2022-11-13 14:56:32 -05:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Nasreddine Bencherchali
							
						 
					 | 
					
						
						
							
						
						0d7efb8ead
					 | 
					
						
						
							
							Adding and updating various LOLBINS (#229)
						
						
						
						
						
						
						
						Co-authored-by: Wietze <wietze@users.noreply.github.com> 
						
						
					 | 
					
						2022-11-11 16:42:44 +00:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Grzegorz Tworek
							
						 
					 | 
					
						
						
							
						
						1587eeaf6c
					 | 
					
						
						
							
							Create Setres.yml (#262)
						
						
						
						
						
						
						
						Co-authored-by: Wietze <wietze@users.noreply.github.com> 
						
						
					 | 
					
						2022-10-26 11:15:13 +01:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Wietze
							
						 
					 | 
					
						
						
							
						
						c20f388444
					 | 
					
						
						
							
							Fixing minor error in description of Explorer, closes #257
						
						
						
						
						
						
					 | 
					
						2022-10-26 09:14:27 +01:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								frack113
							
						 
					 | 
					
						
						
							
						
						01d7580886
					 | 
					
						
						
							
							Add Sigma rule references to various LOLBAS (#260)
						
						
						
						
						
						
					 | 
					
						2022-10-26 09:10:39 +01:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Wietze
							
						 
					 | 
					
						
						
							
						
						a0556744d1
					 | 
					
						
						
							
							Merge branch 'master' into windows_11_sprint
						
						
						
						
						
						
					 | 
					
						2022-10-04 15:45:57 +01:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Wietze
							
						 
					 | 
					
						
						
							
						
						6f2135e173
					 | 
					
						
						
							
							Updating category of fltMC to tamper
						
						
						
						
						
						
					 | 
					
						2022-10-04 15:37:56 +01:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Daniel Santos
							
						 
					 | 
					
						
						
							
						
						4217d0f8ca
					 | 
					
						
						
							
							Adding .NET Core binary createdump.exe (#240)
						
						
						
						
						
						
						
						Co-authored-by: Daniel Santos <vovohelo@gmail.com>
Co-authored-by: Wietze <wietze@users.noreply.github.com> 
						
						
					 | 
					
						2022-10-04 13:23:10 +01:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								securepeacock
							
						 
					 | 
					
						
						
							
						
						461fbaf787
					 | 
					
						
						
							
							Update Powerpnt.yml with Sigma (#222)
						
						
						
						
						
						
						
						Co-authored-by: Wietze <wietze@users.noreply.github.com> 
						
						
					 | 
					
						2022-10-04 12:36:49 +01:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Wietze
							
						 
					 | 
					
						
						
							
						
						76acca6f2b
					 | 
					
						
						
							
							Merge branch 'master' into windows_11_sprint
						
						
						
						
						
						
					 | 
					
						2022-10-04 12:31:31 +01:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								C-h4ck-0
							
						 
					 | 
					
						
						
							
						
						f29471dde9
					 | 
					
						
						
							
							Adding download functionality entries to existing binaries (#239)
						
						
						
						
						
						
						
						Co-authored-by: Wietze <wietze@users.noreply.github.com> 
						
						
					 | 
					
						2022-10-04 12:27:31 +01:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								C-h4ck-0
							
						 
					 | 
					
						
						
							
						
						ea68ad824d
					 | 
					
						
						
							
							Adding 3 Microsoft Office-based downloaders (#238)
						
						
						
						
						
						
						
						Co-authored-by: Wietze <wietze@users.noreply.github.com> 
						
						
					 | 
					
						2022-10-04 12:13:56 +01:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								saulpanders
							
						 
					 | 
					
						
						
							
						
						83ca9aa197
					 | 
					
						
						
							
							Adding Windows Package Manager tool winget.exe (#188)
						
						
						
						
						
						
						
						Co-authored-by: Wietze <wietze@users.noreply.github.com> 
						
						
					 | 
					
						2022-10-04 11:27:47 +01:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Wietze
							
						 
					 | 
					
						
						
							
						
						67e1040172
					 | 
					
						
						
							
							Merge remote-tracking branch 'upstream/master' into windows_11_sprint
						
						
						
						
						
						
					 | 
					
						2022-10-03 16:18:57 +01:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Conor Richard
							
						 
					 | 
					
						
						
							
						
						da38f3d8ed
					 | 
					
						
						
							
							Merge pull request #185 from whickey-r7/patch-1
						
						
						
						
						
						
						
						Create Unregmp2.yml 
						
						
					 | 
					
						2022-09-17 21:38:59 -04:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Conor Richard
							
						 
					 | 
					
						
						
							
						
						a9e5707f74
					 | 
					
						
						
							
							Removing extra YAML record start "---"
						
						
						
						
						
						
					 | 
					
						2022-09-17 21:37:30 -04:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Conor Richard
							
						 
					 | 
					
						
						
							
						
						59808608e7
					 | 
					
						
						
							
							Merge pull request #180 from wietze/new/CustomShellHost
						
						
						
						
						
						
						
						Adding CustomShellHost.exe LOLBAS 
						
						
					 | 
					
						2022-09-17 21:34:04 -04:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Conor Richard
							
						 
					 | 
					
						
						
							
						
						05faad73b2
					 | 
					
						
						
							
							Removing extra YAML record start "---"
						
						
						
						
						
						
					 | 
					
						2022-09-17 21:32:13 -04:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Conor Richard
							
						 
					 | 
					
						
						
							
						
						c22d17a116
					 | 
					
						
						
							
							Merge pull request #176 from akat12/Ssh
						
						
						
						
						
						
						
						Create Ssh 
						
						
					 | 
					
						2022-09-17 21:25:49 -04:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Conor Richard
							
						 
					 | 
					
						
						
							
						
						14896a1436
					 | 
					
						
						
							
							Removed trailing space on line 3
						
						
						
						
						
						
					 | 
					
						2022-09-17 21:24:04 -04:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Conor Richard
							
						 
					 | 
					
						
						
							
						
						730359aa0d
					 | 
					
						
						
							
							Changed AWL MitreID and removed extra YAML record start "---"
						
						
						
						
						
						
					 | 
					
						2022-09-17 21:21:13 -04:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Conor Richard
							
						 
					 | 
					
						
						
							
						
						aa698337ff
					 | 
					
						
						
							
							Merge pull request #148 from elliotkillick/fsutil
						
						
						
						
						
						
						
						Create fsutil.yml 
						
						
					 | 
					
						2022-09-17 08:10:53 -04:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Conor Richard
							
						 
					 | 
					
						
						
							
						
						181672267b
					 | 
					
						
						
							
							Adding quotes since the ":" falls at the end to fix linting error
						
						
						
						
						
						
					 | 
					
						2022-09-17 08:09:27 -04:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Conor Richard
							
						 
					 | 
					
						
						
							
						
						4615fbc582
					 | 
					
						
						
							
							fixing indentation in line 14
						
						
						
						
						
						
					 | 
					
						2022-09-17 08:04:58 -04:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Conor Richard
							
						 
					 | 
					
						
						
							
						
						2759dd0565
					 | 
					
						
						
							
							Adding USN deletion that @bohops mentioned in #148 notes
						
						
						
						
						
						
					 | 
					
						2022-09-17 08:01:53 -04:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Conor Richard
							
						 
					 | 
					
						
						
							
						
						e878c66e6f
					 | 
					
						
						
							
							Cleaning YAML, updated new category Tamper
						
						
						
						
						
						
					 | 
					
						2022-09-17 07:55:16 -04:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Conor Richard
							
						 
					 | 
					
						
						
							
						
						f5c797a888
					 | 
					
						
						
							
							Merge pull request #147 from elliotkillick/DeviceCredentialDeployment
						
						
						
						
						
						
						
						Create DeviceCredentialDeployment.yml 
						
						
					 | 
					
						2022-09-17 07:52:29 -04:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Conor Richard
							
						 
					 | 
					
						
						
							
						
						7dd6ca24aa
					 | 
					
						
						
							
							Removing invalid MiterLink key.
						
						
						
						
						
						
					 | 
					
						2022-09-17 07:50:44 -04:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Conor Richard
							
						 
					 | 
					
						
						
							
						
						1e6d6d23cc
					 | 
					
						
						
							
							Removing extra document start "---" and updating category to Conceal.
						
						
						
						
						
						
					 | 
					
						2022-09-17 07:47:06 -04:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Conor Richard
							
						 
					 | 
					
						
						
							
						
						61043ccf0b
					 | 
					
						
						
							
							Merge pull request #245 from gtworek/patch-1
						
						
						
						
						
						
						
						Create Ldifde.yml 
						
						
					 | 
					
						2022-09-17 00:09:22 -04:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Conor Richard
							
						 
					 | 
					
						
						
							
						
						2689786b59
					 | 
					
						
						
							
							Update Ldifde.yml
						
						
						
						
						
						
						
						Removed trailing spaces. 
						
						
					 | 
					
						2022-09-17 00:06:25 -04:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Conor Richard
							
						 
					 | 
					
						
						
							
						
						9875eb2ed2
					 | 
					
						
						
							
							Update Ldifde.yml
						
						
						
						
						
						
						
						Removed final "---". It does not match the current template and schema checks. 
						
						
					 | 
					
						2022-09-17 00:03:20 -04:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Conor Richard
							
						 
					 | 
					
						
						
							
						
						2c9a7a97ce
					 | 
					
						
						
							
							Merge pull request #244 from 721574n/tristan_add
						
						
						
						
						
						
						
						Added external reference about Rundll32 
						
						
					 | 
					
						2022-09-16 23:46:43 -04:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Filipe Spencer
							
						 
					 | 
					
						
						
							
						
						d780de4ece
					 | 
					
						
						
							
							Prep for new yamllint
						
						
						
						
						
						
					 | 
					
						2022-09-16 11:29:26 +00:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Conor Richard
							
						 
					 | 
					
						
						
							
						
						3347e43b3f
					 | 
					
						
						
							
							Merge branch 'master' into alias_introduction
						
						
						
						
						
						
					 | 
					
						2022-09-15 13:54:50 -04:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								xenoscr
							
						 
					 | 
					
						
						
							
						
						dfb30f194f
					 | 
					
						
						
							
							Tweaked the Link regex to allow anchor tags and the handle regex to permit blank entries.
						
						
						
						
						
						
					 | 
					
						2022-09-13 23:37:10 -04:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								xenoscr
							
						 
					 | 
					
						
						
							
						
						ee68df7f26
					 | 
					
						
						
							
							Put schema back to previous state and fixed non-compliant Link in At.yml
						
						
						
						
						
						
					 | 
					
						2022-09-13 23:06:42 -04:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								xenoscr
							
						 
					 | 
					
						
						
							
						
						92424a40de
					 | 
					
						
						
							
							Implimenting requested changes from PR #251 review from @wietze.
						
						
						
						
						
						
					 | 
					
						2022-09-13 22:51:52 -04:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								xenoscr
							
						 
					 | 
					
						
						
							
						
						2c3653f0c4
					 | 
					
						
						
							
							Fixing more file formatting issues.
						
						
						
						
						
						
					 | 
					
						2022-09-11 01:36:14 -04:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								xenoscr
							
						 
					 | 
					
						
						
							
						
						654cdd2d61
					 | 
					
						
						
							
							Fixing file formating.
						
						
						
						
						
						
					 | 
					
						2022-09-11 01:33:36 -04:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								xenoscr
							
						 
					 | 
					
						
						
							
						
						3d6a4be2a5
					 | 
					
						
						
							
							Fixing more formatting errors.
						
						
						
						
						
						
					 | 
					
						2022-09-11 01:23:21 -04:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								xenoscr
							
						 
					 | 
					
						
						
							
						
						98813fe01b
					 | 
					
						
						
							
							Fixing errors found in yaml lint action.
						
						
						
						
						
						
					 | 
					
						2022-09-11 01:07:18 -04:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								xenoscr
							
						 
					 | 
					
						
						
							
						
						6e253a7a38
					 | 
					
						
						
							
							Adding missing OperatingSystem values.
						
						
						
						
						
						
					 | 
					
						2022-09-11 00:22:36 -04:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								xenoscr
							
						 
					 | 
					
						
						
							
						
						68e5795aec
					 | 
					
						
						
							
							Fixing Acknowledgement values.
						
						
						
						
						
						
					 | 
					
						2022-09-11 00:20:05 -04:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								xenoscr
							
						 
					 | 
					
						
						
							
						
						aa1e1ea2be
					 | 
					
						
						
							
							Adding no defualt paths to pass schema validations
						
						
						
						
						
						
					 | 
					
						2022-09-11 00:16:59 -04:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								xenoscr
							
						 
					 | 
					
						
						
							
						
						c933426c1a
					 | 
					
						
						
							
							Adding missing Path value.
						
						
						
						
						
						
					 | 
					
						2022-09-11 00:03:30 -04:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 |