xenoscr
							
						 
					 | 
					
						
						
							
						
						2c3653f0c4
					 | 
					
						
						
							
							Fixing more file formatting issues.
						
						
						
						
						
						
					 | 
					
						2022-09-11 01:36:14 -04:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								xenoscr
							
						 
					 | 
					
						
						
							
						
						654cdd2d61
					 | 
					
						
						
							
							Fixing file formating.
						
						
						
						
						
						
					 | 
					
						2022-09-11 01:33:36 -04:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								xenoscr
							
						 
					 | 
					
						
						
							
						
						3d6a4be2a5
					 | 
					
						
						
							
							Fixing more formatting errors.
						
						
						
						
						
						
					 | 
					
						2022-09-11 01:23:21 -04:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								xenoscr
							
						 
					 | 
					
						
						
							
						
						98813fe01b
					 | 
					
						
						
							
							Fixing errors found in yaml lint action.
						
						
						
						
						
						
					 | 
					
						2022-09-11 01:07:18 -04:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								xenoscr
							
						 
					 | 
					
						
						
							
						
						6e253a7a38
					 | 
					
						
						
							
							Adding missing OperatingSystem values.
						
						
						
						
						
						
					 | 
					
						2022-09-11 00:22:36 -04:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								xenoscr
							
						 
					 | 
					
						
						
							
						
						68e5795aec
					 | 
					
						
						
							
							Fixing Acknowledgement values.
						
						
						
						
						
						
					 | 
					
						2022-09-11 00:20:05 -04:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								xenoscr
							
						 
					 | 
					
						
						
							
						
						aa1e1ea2be
					 | 
					
						
						
							
							Adding no defualt paths to pass schema validations
						
						
						
						
						
						
					 | 
					
						2022-09-11 00:16:59 -04:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								xenoscr
							
						 
					 | 
					
						
						
							
						
						c933426c1a
					 | 
					
						
						
							
							Adding missing Path value.
						
						
						
						
						
						
					 | 
					
						2022-09-11 00:03:30 -04:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								xenoscr
							
						 
					 | 
					
						
						
							
						
						1bd305e3a3
					 | 
					
						
						
							
							Adding missing Usecase values.
						
						
						
						
						
						
					 | 
					
						2022-09-10 23:53:21 -04:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								xenoscr
							
						 
					 | 
					
						
						
							
						
						c24cad7868
					 | 
					
						
						
							
							Adding missing OperatingSystem values.
						
						
						
						
						
						
					 | 
					
						2022-09-10 23:48:38 -04:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								xenoscr
							
						 
					 | 
					
						
						
							
						
						371d1cf2cc
					 | 
					
						
						
							
							Correcting case in Usecase key names.
						
						
						
						
						
						
					 | 
					
						2022-09-10 23:45:28 -04:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								xenoscr
							
						 
					 | 
					
						
						
							
						
						a040ca3e40
					 | 
					
						
						
							
							Adding missing OperatingSystem values to Ieadvpack.yml
						
						
						
						
						
						
					 | 
					
						2022-09-10 23:41:38 -04:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								xenoscr
							
						 
					 | 
					
						
						
							
						
						f5baac1c45
					 | 
					
						
						
							
							Adding missing authors
						
						
						
						
						
						
					 | 
					
						2022-09-10 23:37:10 -04:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								xenoscr
							
						 
					 | 
					
						
						
							
						
						700d181c7e
					 | 
					
						
						
							
							Adding missing OperatingSystem key in Ilasm.yml
						
						
						
						
						
						
					 | 
					
						2022-09-10 23:30:36 -04:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								xenoscr
							
						 
					 | 
					
						
						
							
						
						d585695b08
					 | 
					
						
						
							
							Adding missing Descriptions.
						
						
						
						
						
						
					 | 
					
						2022-09-10 23:26:10 -04:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								xenoscr
							
						 
					 | 
					
						
						
							
						
						abb1034b00
					 | 
					
						
						
							
							Added missing description to Extexport.yml
						
						
						
						
						
						
					 | 
					
						2022-09-10 23:08:46 -04:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								xenoscr
							
						 
					 | 
					
						
						
							
						
						dd58662ee9
					 | 
					
						
						
							
							Correcting 'UAC bypass' to 'UAC Bypass'
						
						
						
						
						
						
					 | 
					
						2022-09-10 22:58:06 -04:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								xenoscr
							
						 
					 | 
					
						
						
							
						
						0ed1694bf1
					 | 
					
						
						
							
							Correcting 'AWL bypass' to 'AWL Bypass'
						
						
						
						
						
						
					 | 
					
						2022-09-10 22:55:32 -04:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								xenoscr
							
						 
					 | 
					
						
						
							
						
						09e81d0bd1
					 | 
					
						
						
							
							Correcting Cmstp.yml Category value, case.
						
						
						
						
						
						
					 | 
					
						2022-09-10 22:48:08 -04:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								xenoscr
							
						 
					 | 
					
						
						
							
						
						5e0ae9c976
					 | 
					
						
						
							
							Correcting Cmstp.yml Category value.
						
						
						
						
						
						
					 | 
					
						2022-09-10 22:46:13 -04:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								xenoscr
							
						 
					 | 
					
						
						
							
						
						ce36f924fc
					 | 
					
						
						
							
							Removing extra --- from each yaml file
						
						
						
						
						
						
					 | 
					
						2022-09-10 22:16:47 -04:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Ryan Stamp
							
						 
					 | 
					
						
						
							
						
						8810e30f0a
					 | 
					
						
						
							
							Fix incorrect decodehex command syntax (#230)
						
						
						
						
						
						
					 | 
					
						2022-09-02 18:44:23 +01:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								securepeacock
							
						 
					 | 
					
						
						
							
						
						68c14b894c
					 | 
					
						
						
							
							Update UtilityFunctions.yml (#228)
						
						
						
						
						
						
					 | 
					
						2022-09-02 18:42:59 +01:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Oddvar Moe
							
						 
					 | 
					
						
						
							
						
						68a6f0a35f
					 | 
					
						
						
							
							added sigma detection for pester
						
						
						
						
						
						
					 | 
					
						2022-08-24 12:32:48 +02:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Oddvar Moe
							
						 
					 | 
					
						
						
							
						
						c53a8ea06e
					 | 
					
						
						
							
							Adjusted comment in command
						
						
						
						
						
						
					 | 
					
						2022-08-23 15:47:17 +02:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Oddvar Moe
							
						 
					 | 
					
						
						
							
						
						fdc1b2c827
					 | 
					
						
						
							
							Update pester.bat with an additional example
						
						
						
						
						
						
					 | 
					
						2022-08-23 15:44:57 +02:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Oddvar Moe
							
						 
					 | 
					
						
						
							
						
						8283d8d915
					 | 
					
						
						
							
							Delete Dllhost.yml
						
						
						
						
						
						
						
						https://twitter.com/0gtweet/status/1533804788038647808 
						
						
					 | 
					
						2022-06-09 10:51:40 +02:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								frack113
							
						 
					 | 
					
						
						
							
						
						91350057ce
					 | 
					
						
						
							
							Add sigma references to CL_LoadAssembly, CLMutexVerifiers entries (#221)
						
						
						
						
						
						
					 | 
					
						2022-06-04 11:50:35 +01:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Kostas
							
						 
					 | 
					
						
						
							
						
						314f585da9
					 | 
					
						
						
							
							Update Hh.yml
						
						
						
						
						
						
						
						Added SysWoW64 Path 
						
						
					 | 
					
						2022-05-24 15:29:03 -07:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Kostas
							
						 
					 | 
					
						
						
							
						
						aae794c59c
					 | 
					
						
						
							
							Update Hh.yml
						
						
						
						
						
						
						
						Fixing the full path of the hh.exe binary to C:\Windows\hh.exe 
						
						
					 | 
					
						2022-05-24 14:23:18 -07:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								frack113
							
						 
					 | 
					
						
						
							
						
						f85eeb748a
					 | 
					
						
						
							
							Add Sigma references to conhost, imewdbld, ie4uinit, ilasm, offlinescannershell and replace (#219)
						
						
						
						
						
						
					 | 
					
						2022-05-23 12:35:58 +01:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Chris "Lopi" Spehn
							
						 
					 | 
					
						
						
							
						
						36945392ca
					 | 
					
						
						
							
							Merge pull request #201 from wietze/new/Conhost
						
						
						
						
						
						
						
						Adding Conhost.exe LOLBAS 
						
						
					 | 
					
						2022-05-19 10:27:10 -06:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Chris "Lopi" Spehn
							
						 
					 | 
					
						
						
							
						
						e872ce028b
					 | 
					
						
						
							
							Merge pull request #214 from jstnk9/master
						
						
						
						
						
						
						
						Added new sigma rule and references to desk.cpl 
						
						
					 | 
					
						2022-05-19 10:21:21 -06:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								ManuelBerrueta
							
						 
					 | 
					
						
						
							
						
						68b772a567
					 | 
					
						
						
							
							Updated yml/OtherMSBinaries/Sqlps.yml, used recently in a campaign shared my Microsoft Security Intelligence. Would be useful reference for Red Teamers/Offensive Security Engineers as well as Blue Teamers/Defenders who reference this open source project/library.
						
						
						
						
						
						
					 | 
					
						2022-05-19 07:12:37 -07:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								John Dwyer
							
						 
					 | 
					
						
						
							
						
						90b6082f1d
					 | 
					
						
						
							
							Update Rdrleakdiag.yml
						
						
						
						
						
						
					 | 
					
						2022-05-19 13:30:11 +00:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								John Dwyer
							
						 
					 | 
					
						
						
							
						
						e2493d8ccf
					 | 
					
						
						
							
							Detection Resources and Other Updates (LOLBAS-Project#84)
						
						
						
						
						
						
						
						https://github.com/LOLBAS-Project/LOLBAS/issues/84 
						
						
					 | 
					
						2022-05-18 19:00:26 +00:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								John Dwyer
							
						 
					 | 
					
						
						
							
						
						d935f096fd
					 | 
					
						
						
							
							Added rdrleakdiag dump
						
						
						
						
						
						
						
						Added yaml for rdrleakdiag process dumping capability 
						
						
					 | 
					
						2022-05-18 18:58:04 +00:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								frack113
							
						 
					 | 
					
						
						
							
						
						d1738b946b
					 | 
					
						
						
							
							Adding various Sigma references (#213)
						
						
						
						
						
						
						
						Co-authored-by: Wietze <wietze@users.noreply.github.com> 
						
						
					 | 
					
						2022-05-17 09:18:45 +01:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								bohops
							
						 
					 | 
					
						
						
							
						
						3571a7ad88
					 | 
					
						
						
							
							Create AccCheckConsole.yml (#187)
						
						
						
						
						
						
					 | 
					
						2022-05-15 21:55:16 +01:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								mrd0x
							
						 
					 | 
					
						
						
							
						
						7c2f3231d3
					 | 
					
						
						
							
							Adding Dump64.exe (#182)
						
						
						
						
						
						
						
						Co-authored-by: mrd0x <mrd0x@example.com>
Co-authored-by: Wietze <wietze@users.noreply.github.com> 
						
						
					 | 
					
						2022-05-15 21:21:45 +01:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Wietze
							
						 
					 | 
					
						
						
							
						
						b333db4f91
					 | 
					
						
						
							
							Fixing typo (ieaframe -> ieframe)
						
						
						
						
						
						
					 | 
					
						2022-05-15 21:06:33 +01:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								akshat pradhan
							
						 
					 | 
					
						
						
							
						
						79f4cbdb7f
					 | 
					
						
						
							
							Changed tid to T1105 for downloads (#195)
						
						
						
						
						
						
					 | 
					
						2022-05-15 20:38:24 +01:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								jstnk9
							
						 
					 | 
					
						
						
							
						
						00bc9177bd
					 | 
					
						
						
							
							Added new sigma rule and references
						
						
						
						
						
						
						
						Added new sigma rule and references 
						
						
					 | 
					
						2022-05-15 16:42:44 +02:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								bohops
							
						 
					 | 
					
						
						
							
						
						d93539bf9b
					 | 
					
						
						
							
							Quick fix for syntax and removed IOC
						
						
						
						
						
						
					 | 
					
						2022-04-29 23:06:41 -04:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								cr1sp4
							
						 
					 | 
					
						
						
							
						
						666e6e8645
					 | 
					
						
						
							
							Update Desk.yml (#210)
						
						
						
						
						
						
						
						Added Sigma rules. 
						
						
					 | 
					
						2022-04-29 22:52:57 -04:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Wietze
							
						 
					 | 
					
						
						
							
						
						619aafbfa2
					 | 
					
						
						
							
							Adding extra contributor to Desk.cpl entry
						
						
						
						
						
						
					 | 
					
						2022-04-28 13:01:35 +01:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Wietze
							
						 
					 | 
					
						
						
							
						
						4a8bdf4844
					 | 
					
						
						
							
							Fix casing on Desk.cpl entry
						
						
						
						
						
						
					 | 
					
						2022-04-27 11:20:13 +01:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								LuxNoBu!!shit
							
						 
					 | 
					
						
						
							
						
						6ed0fb9326
					 | 
					
						
						
							
							Create Desk.cpl (#207)
						
						
						
						
						
						
						
						Co-authored-by: Wietze <wietze@users.noreply.github.com> 
						
						
					 | 
					
						2022-04-27 11:15:15 +01:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Wietze
							
						 
					 | 
					
						
						
							
						
						e4261b1f02
					 | 
					
						
						
							
							Fixing typo
						
						
						
						
						
						
					 | 
					
						2022-04-26 16:59:14 +01:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Wietze
							
						 
					 | 
					
						
						
							
						
						5c46dd63f5
					 | 
					
						
						
							
							Giving Hexacorn the proper credit
						
						
						
						
						
						
					 | 
					
						2022-04-07 15:50:39 +01:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 |