public-mirrors/LOLBAS
1
0
Fork 0
mirror of https://github.com/LOLBAS-Project/LOLBAS synced 2025-11-04 10:39:56 +01:00
Code Issues Projects Releases Wiki Activity
574 Commits 4 Branches 0 Tags
59808608e796bf0927b50fd6377bebdfe5a9e889
Commit Graph

269 Commits

Author SHA1 Message Date
Conor Richard
59808608e7 Merge pull request #180 from wietze/new/CustomShellHost 
Adding CustomShellHost.exe LOLBAS
 2022-09-17 21:34:04 -04:00
Conor Richard
05faad73b2 Removing extra YAML record start "---" 2022-09-17 21:32:13 -04:00
Conor Richard
c22d17a116 Merge pull request #176 from akat12/Ssh 
Create Ssh
 2022-09-17 21:25:49 -04:00
Conor Richard
14896a1436 Removed trailing space on line 3 2022-09-17 21:24:04 -04:00
Conor Richard
730359aa0d Changed AWL MitreID and removed extra YAML record start "---" 2022-09-17 21:21:13 -04:00
Conor Richard
aa698337ff Merge pull request #148 from elliotkillick/fsutil 
Create fsutil.yml
 2022-09-17 08:10:53 -04:00
Conor Richard
181672267b Adding quotes since the ":" falls at the end to fix linting error 2022-09-17 08:09:27 -04:00
Conor Richard
4615fbc582 fixing indentation in line 14 2022-09-17 08:04:58 -04:00
Conor Richard
2759dd0565 Adding USN deletion that @bohops mentioned in #148 notes 2022-09-17 08:01:53 -04:00
Conor Richard
e878c66e6f Cleaning YAML, updated new category Tamper 2022-09-17 07:55:16 -04:00
Conor Richard
f5c797a888 Merge pull request #147 from elliotkillick/DeviceCredentialDeployment 
Create DeviceCredentialDeployment.yml
 2022-09-17 07:52:29 -04:00
Conor Richard
7dd6ca24aa Removing invalid MiterLink key. 2022-09-17 07:50:44 -04:00
Conor Richard
1e6d6d23cc Removing extra document start "---" and updating category to Conceal. 2022-09-17 07:47:06 -04:00
Conor Richard
61043ccf0b Merge pull request #245 from gtworek/patch-1 
Create Ldifde.yml
 2022-09-17 00:09:22 -04:00
Conor Richard
2689786b59 Update Ldifde.yml 
Removed trailing spaces.
 2022-09-17 00:06:25 -04:00
Conor Richard
9875eb2ed2 Update Ldifde.yml 
Removed final "---". It does not match the current template and schema checks.
 2022-09-17 00:03:20 -04:00
Conor Richard
2c9a7a97ce Merge pull request #244 from 721574n/tristan_add 
Added external reference about Rundll32
 2022-09-16 23:46:43 -04:00
xenoscr
dfb30f194f Tweaked the Link regex to allow anchor tags and the handle regex to permit blank entries. 2022-09-13 23:37:10 -04:00
xenoscr
ee68df7f26 Put schema back to previous state and fixed non-compliant Link in At.yml 2022-09-13 23:06:42 -04:00
xenoscr
92424a40de Implimenting requested changes from PR #251 review from @wietze. 2022-09-13 22:51:52 -04:00
xenoscr
654cdd2d61 Fixing file formating. 2022-09-11 01:33:36 -04:00
xenoscr
3d6a4be2a5 Fixing more formatting errors. 2022-09-11 01:23:21 -04:00
xenoscr
98813fe01b Fixing errors found in yaml lint action. 2022-09-11 01:07:18 -04:00
xenoscr
700d181c7e Adding missing OperatingSystem key in Ilasm.yml 2022-09-10 23:30:36 -04:00
xenoscr
d585695b08 Adding missing Descriptions. 2022-09-10 23:26:10 -04:00
xenoscr
abb1034b00 Added missing description to Extexport.yml 2022-09-10 23:08:46 -04:00
xenoscr
dd58662ee9 Correcting 'UAC bypass' to 'UAC Bypass' 2022-09-10 22:58:06 -04:00
xenoscr
0ed1694bf1 Correcting 'AWL bypass' to 'AWL Bypass' 2022-09-10 22:55:32 -04:00
xenoscr
09e81d0bd1 Correcting Cmstp.yml Category value, case. 2022-09-10 22:48:08 -04:00
xenoscr
5e0ae9c976 Correcting Cmstp.yml Category value. 2022-09-10 22:46:13 -04:00
xenoscr
ce36f924fc Removing extra --- from each yaml file 2022-09-10 22:16:47 -04:00
Ryan Stamp
8810e30f0a Fix incorrect decodehex command syntax (#230) 2022-09-02 18:44:23 +01:00
Grzegorz Tworek
9b70f38986 Create Ldifde.yml 2022-08-31 17:58:30 +02:00
721574n
4b564464fd Added external reference for Rundll32 2022-08-24 12:11:31 +02:00
Oddvar Moe
8283d8d915 Delete Dllhost.yml 
https://twitter.com/0gtweet/status/1533804788038647808
 2022-06-09 10:51:40 +02:00
Kostas
314f585da9 Update Hh.yml 
Added SysWoW64 Path
 2022-05-24 15:29:03 -07:00
Kostas
aae794c59c Update Hh.yml 
Fixing the full path of the hh.exe binary to C:\Windows\hh.exe
 2022-05-24 14:23:18 -07:00
frack113
f85eeb748a Add Sigma references to conhost, imewdbld, ie4uinit, ilasm, offlinescannershell and replace (#219) 2022-05-23 12:35:58 +01:00
Chris "Lopi" Spehn
36945392ca Merge pull request #201 from wietze/new/Conhost 
Adding Conhost.exe LOLBAS
 2022-05-19 10:27:10 -06:00
John Dwyer
90b6082f1d Update Rdrleakdiag.yml 2022-05-19 13:30:11 +00:00
John Dwyer
e2493d8ccf Detection Resources and Other Updates (LOLBAS-Project#84) 
https://github.com/LOLBAS-Project/LOLBAS/issues/84
 2022-05-18 19:00:26 +00:00
John Dwyer
d935f096fd Added rdrleakdiag dump 
Added yaml for rdrleakdiag process dumping capability
 2022-05-18 18:58:04 +00:00
frack113
d1738b946b Adding various Sigma references (#213) 
Co-authored-by: Wietze <wietze@users.noreply.github.com>
 2022-05-17 09:18:45 +01:00
akshat pradhan
79f4cbdb7f Changed tid to T1105 for downloads (#195) 2022-05-15 20:38:24 +01:00
Wietze
5c46dd63f5 Giving Hexacorn the proper credit 2022-04-07 15:50:39 +01:00
Wietze
4df2e43c82 Adding Conhost.exe LOLBAS 2022-04-05 18:46:58 +01:00
Wietze
55a7ea9a81 Fixing wlrmdr entry 2022-02-16 21:02:24 +00:00
Moshe Kaplan
12c85eb8f0 Create wlrmdr.yml (#194) 
Co-authored-by: Wietze <wietze@users.noreply.github.com>
 2022-02-16 20:41:14 +00:00
akshat pradhan
a7f7ec2cc2 Changing ATT&CK TID of wuauclt.exe entry (#193) 2022-01-23 22:24:59 +00:00
frack113
17899acbb0 Adding Sigma references to ConfigSecurityPolicy, Diantz, ExtExport & Extrac32 (#184) 2021-12-06 11:19:01 +00:00