269 Commits

Author	SHA1	Message	Date
Conor Richard	59808608e7	Merge pull request #180 from wietze/new/CustomShellHost ... Adding CustomShellHost.exe LOLBAS	2022-09-17 21:34:04 -04:00
Conor Richard	05faad73b2	Removing extra YAML record start "---"	2022-09-17 21:32:13 -04:00
Conor Richard	c22d17a116	Merge pull request #176 from akat12/Ssh ... Create Ssh	2022-09-17 21:25:49 -04:00
Conor Richard	14896a1436	Removed trailing space on line 3	2022-09-17 21:24:04 -04:00
Conor Richard	730359aa0d	Changed AWL MitreID and removed extra YAML record start "---"	2022-09-17 21:21:13 -04:00
Conor Richard	aa698337ff	Merge pull request #148 from elliotkillick/fsutil ... Create fsutil.yml	2022-09-17 08:10:53 -04:00
Conor Richard	181672267b	Adding quotes since the ":" falls at the end to fix linting error	2022-09-17 08:09:27 -04:00
Conor Richard	4615fbc582	fixing indentation in line 14	2022-09-17 08:04:58 -04:00
Conor Richard	2759dd0565	Adding USN deletion that @bohops mentioned in #148 notes	2022-09-17 08:01:53 -04:00
Conor Richard	e878c66e6f	Cleaning YAML, updated new category Tamper	2022-09-17 07:55:16 -04:00
Conor Richard	f5c797a888	Merge pull request #147 from elliotkillick/DeviceCredentialDeployment ... Create DeviceCredentialDeployment.yml	2022-09-17 07:52:29 -04:00
Conor Richard	7dd6ca24aa	Removing invalid MiterLink key.	2022-09-17 07:50:44 -04:00
Conor Richard	1e6d6d23cc	Removing extra document start "---" and updating category to Conceal.	2022-09-17 07:47:06 -04:00
Conor Richard	61043ccf0b	Merge pull request #245 from gtworek/patch-1 ... Create Ldifde.yml	2022-09-17 00:09:22 -04:00
Conor Richard	2689786b59	Update Ldifde.yml ... Removed trailing spaces.	2022-09-17 00:06:25 -04:00
Conor Richard	9875eb2ed2	Update Ldifde.yml ... Removed final "---". It does not match the current template and schema checks.	2022-09-17 00:03:20 -04:00
Conor Richard	2c9a7a97ce	Merge pull request #244 from 721574n/tristan_add ... Added external reference about Rundll32	2022-09-16 23:46:43 -04:00
xenoscr	dfb30f194f	Tweaked the Link regex to allow anchor tags and the handle regex to permit blank entries.	2022-09-13 23:37:10 -04:00
xenoscr	ee68df7f26	Put schema back to previous state and fixed non-compliant Link in At.yml	2022-09-13 23:06:42 -04:00
xenoscr	92424a40de	Implimenting requested changes from PR #251 review from @wietze.	2022-09-13 22:51:52 -04:00
xenoscr	654cdd2d61	Fixing file formating.	2022-09-11 01:33:36 -04:00
xenoscr	3d6a4be2a5	Fixing more formatting errors.	2022-09-11 01:23:21 -04:00
xenoscr	98813fe01b	Fixing errors found in yaml lint action.	2022-09-11 01:07:18 -04:00
xenoscr	700d181c7e	Adding missing OperatingSystem key in Ilasm.yml	2022-09-10 23:30:36 -04:00
xenoscr	d585695b08	Adding missing Descriptions.	2022-09-10 23:26:10 -04:00
xenoscr	abb1034b00	Added missing description to Extexport.yml	2022-09-10 23:08:46 -04:00
xenoscr	dd58662ee9	Correcting 'UAC bypass' to 'UAC Bypass'	2022-09-10 22:58:06 -04:00
xenoscr	0ed1694bf1	Correcting 'AWL bypass' to 'AWL Bypass'	2022-09-10 22:55:32 -04:00
xenoscr	09e81d0bd1	Correcting Cmstp.yml Category value, case.	2022-09-10 22:48:08 -04:00
xenoscr	5e0ae9c976	Correcting Cmstp.yml Category value.	2022-09-10 22:46:13 -04:00
xenoscr	ce36f924fc	Removing extra --- from each yaml file	2022-09-10 22:16:47 -04:00
Ryan Stamp	8810e30f0a	Fix incorrect decodehex command syntax (#230)	2022-09-02 18:44:23 +01:00
Grzegorz Tworek	9b70f38986	Create Ldifde.yml	2022-08-31 17:58:30 +02:00
721574n	4b564464fd	Added external reference for Rundll32	2022-08-24 12:11:31 +02:00
Oddvar Moe	8283d8d915	Delete Dllhost.yml ... https://twitter.com/0gtweet/status/1533804788038647808	2022-06-09 10:51:40 +02:00
Kostas	314f585da9	Update Hh.yml ... Added SysWoW64 Path	2022-05-24 15:29:03 -07:00
Kostas	aae794c59c	Update Hh.yml ... Fixing the full path of the hh.exe binary to C:\Windows\hh.exe	2022-05-24 14:23:18 -07:00
frack113	f85eeb748a	Add Sigma references to conhost, imewdbld, ie4uinit, ilasm, offlinescannershell and replace (#219)	2022-05-23 12:35:58 +01:00
Chris "Lopi" Spehn	36945392ca	Merge pull request #201 from wietze/new/Conhost ... Adding Conhost.exe LOLBAS	2022-05-19 10:27:10 -06:00
John Dwyer	90b6082f1d	Update Rdrleakdiag.yml	2022-05-19 13:30:11 +00:00
John Dwyer	e2493d8ccf	Detection Resources and Other Updates (LOLBAS-Project#84) ... https://github.com/LOLBAS-Project/LOLBAS/issues/84	2022-05-18 19:00:26 +00:00
John Dwyer	d935f096fd	Added rdrleakdiag dump ... Added yaml for rdrleakdiag process dumping capability	2022-05-18 18:58:04 +00:00
frack113	d1738b946b	Adding various Sigma references (#213) ... Co-authored-by: Wietze <wietze@users.noreply.github.com>	2022-05-17 09:18:45 +01:00
akshat pradhan	79f4cbdb7f	Changed tid to T1105 for downloads (#195)	2022-05-15 20:38:24 +01:00
Wietze	5c46dd63f5	Giving Hexacorn the proper credit	2022-04-07 15:50:39 +01:00
Wietze	4df2e43c82	Adding Conhost.exe LOLBAS	2022-04-05 18:46:58 +01:00
Wietze	55a7ea9a81	Fixing wlrmdr entry	2022-02-16 21:02:24 +00:00
Moshe Kaplan	12c85eb8f0	Create wlrmdr.yml (#194) ... Co-authored-by: Wietze <wietze@users.noreply.github.com>	2022-02-16 20:41:14 +00:00
akshat pradhan	a7f7ec2cc2	Changing ATT&CK TID of wuauclt.exe entry (#193)	2022-01-23 22:24:59 +00:00
frack113	17899acbb0	Adding Sigma references to ConfigSecurityPolicy, Diantz, ExtExport & Extrac32 (#184)	2021-12-06 11:19:01 +00:00