Oddvar Moe 
							
						 
					 
					
						
						
							
						
						80295ef865 
					 
					
						
						
							
							Merge pull request  #54  from ForensicITGuy/ntdsutil  
						
						 
						
						... 
						
						
						
						Ntdsutil & Rasautou addition 
						
						
					 
					
						2020-03-16 20:06:54 +01:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Oddvar Moe 
							
						 
					 
					
						
						
							
						
						81c363ac8a 
					 
					
						
						
							
							Adjustment to vbc.yml contribution  
						
						 
						
						
						
						
					 
					
						2020-03-16 19:55:27 +01:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Oddvar Moe 
							
						 
					 
					
						
						
							
						
						84c613b363 
					 
					
						
						
							
							Merge pull request  #59  from leo1-1/master  
						
						 
						
						... 
						
						
						
						Create vbc.yml 
						
						
					 
					
						2020-03-16 19:49:21 +01:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								leo1-1 
							
						 
					 
					
						
						
							
						
						c7c93e9f95 
					 
					
						
						
							
							Create vbc.yml  
						
						 
						
						
						
						
					 
					
						2020-02-27 17:13:07 +02:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Oddvar Moe 
							
						 
					 
					
						
						
							
						
						acecdcf3df 
					 
					
						
						
							
							Netsh contribution from Freddie Bar-Smith - Thank you  
						
						 
						
						
						
						
					 
					
						2020-01-23 09:07:40 +01:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Oddvar Moe 
							
						 
					 
					
						
						
							
						
						94708ac5d6 
					 
					
						
						
							
							Added links to obfuscation technique from Sailay(valen) on rundll32  
						
						 
						
						
						
						
					 
					
						2020-01-23 08:57:43 +01:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Tony M Lambert 
							
						 
					 
					
						
						
							
						
						e2f217c777 
					 
					
						
						
							
							ntdsutil addition  
						
						 
						
						
						
						
					 
					
						2020-01-10 22:53:34 -06:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Tony M Lambert 
							
						 
					 
					
						
						
							
						
						99b87fdc13 
					 
					
						
						
							
							Rasautou addition  
						
						 
						
						
						
						
					 
					
						2020-01-10 22:52:15 -06:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Oddvar Moe 
							
						 
					 
					
						
						
							
						
						ecc94c2d09 
					 
					
						
						
							
							Adjusted GfxDownloadWrapper  
						
						 
						
						
						
						
					 
					
						2020-01-07 09:08:13 +01:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Oddvar Moe 
							
						 
					 
					
						
						
							
						
						71aec7465b 
					 
					
						
						
							
							Minor adjustments to GfxDownloadWrapper.yml  
						
						 
						
						
						
						
					 
					
						2020-01-07 09:03:42 +01:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Oddvar Moe 
							
						 
					 
					
						
						
							
						
						aada926e6f 
					 
					
						
						
							
							Merge pull request  #52  from jesgal/patch-1  
						
						 
						
						... 
						
						
						
						Create GfxDownloadWrapper.yml 
						
						
					 
					
						2020-01-07 09:00:58 +01:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Oddvar Moe 
							
						 
					 
					
						
						
							
						
						22ef6bfc63 
					 
					
						
						
							
							Added additional paths to CL_MutexVerifiers.ps1 - input from @shilpeshTrivedi  
						
						 
						
						
						
						
					 
					
						2020-01-07 08:45:25 +01:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Oddvar Moe 
							
						 
					 
					
						
						
							
						
						7030e00929 
					 
					
						
						
							
							Capitalized dotnet name  
						
						 
						
						
						
						
					 
					
						2020-01-07 08:40:24 +01:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Oddvar Moe 
							
						 
					 
					
						
						
							
						
						e1b36a25bd 
					 
					
						
						
							
							Rename dotnet.yml to Dotnet.yml  
						
						 
						
						
						
						
					 
					
						2020-01-07 08:37:36 +01:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Oddvar Moe 
							
						 
					 
					
						
						
							
						
						acd38cec9e 
					 
					
						
						
							
							Merge pull request  #49  from felamos/master  
						
						 
						
						... 
						
						
						
						Create dotnet.yml 
						
						
					 
					
						2020-01-07 08:32:35 +01:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								jesgal 
							
						 
					 
					
						
						
							
						
						c9e608ce0f 
					 
					
						
						
							
							Update GfxDownloadWrapper.yml  
						
						 
						
						
						
						
					 
					
						2019-12-27 17:11:30 +01:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								jesgal 
							
						 
					 
					
						
						
							
						
						a057cf2420 
					 
					
						
						
							
							Create GfxDownloadWrapper.yml  
						
						 
						
						... 
						
						
						
						GfxDownloadWrapper.exe downloads the content that returns <URL> and writes it to the file <DESTINATION FILE PATH>. The binary is signed by "Microsoft Windows Hardware", "Compatibility Publisher", "Microsoft Windows Third Party Component CA 2012", "Microsoft Time-Stamp PCA 2010", "Microsoft Time-Stamp Service". 
						
						
					 
					
						2019-12-27 17:02:34 +01:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Ayush Sahay 
							
						 
					 
					
						
						
							
						
						5cb17cfb26 
					 
					
						
						
							
							Create dotnet.yml  
						
						 
						
						
						
						
					 
					
						2019-12-11 15:53:12 +05:30  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Oddvar Moe 
							
						 
					 
					
						
						
							
						
						94a295213e 
					 
					
						
						
							
							Added Dump example to TTTracer.exe  
						
						 
						
						
						
						
					 
					
						2019-11-18 12:50:49 +01:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Oddvar Moe 
							
						 
					 
					
						
						
							
						
						e0db5721ff 
					 
					
						
						
							
							Added Dump Example to TTTracer.exe  
						
						 
						
						
						
						
					 
					
						2019-11-18 12:47:51 +01:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Oddvar Moe 
							
						 
					 
					
						
						
							
						
						4663c13324 
					 
					
						
						
							
							Adjustment  
						
						 
						
						
						
						
					 
					
						2019-11-05 15:47:20 +01:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Oddvar Moe 
							
						 
					 
					
						
						
							
						
						8d74b3062f 
					 
					
						
						
							
							Adjustment  
						
						 
						
						
						
						
					 
					
						2019-11-05 14:36:53 +01:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Oddvar Moe 
							
						 
					 
					
						
						
							
						
						f9a7c42a85 
					 
					
						
						
							
							Added TTTracer.exe - Thanks Onur Ulusoy  
						
						 
						
						
						
						
					 
					
						2019-11-05 12:12:46 +01:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Oddvar Moe 
							
						 
					 
					
						
						
							
						
						13093c879e 
					 
					
						
						
							
							Updated odbcconf.exe with discovery from @Hexacorn <3  
						
						 
						
						
						
						
					 
					
						2019-10-24 10:01:44 +02:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Oddvar Moe 
							
						 
					 
					
						
						
							
						
						cb9fa974dd 
					 
					
						
						
							
							Merge pull request  #46  from felamos/patch-1  
						
						 
						
						... 
						
						
						
						Create devtoolslauncher.yml 
						
						
					 
					
						2019-10-07 23:56:01 +02:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Oddvar Moe 
							
						 
					 
					
						
						
							
						
						7469812286 
					 
					
						
						
							
							Update and rename devtoolslauncher.yml to Devtoolslauncher.yml  
						
						 
						
						
						
						
					 
					
						2019-10-07 23:55:44 +02:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Oddvar Moe 
							
						 
					 
					
						
						
							
						
						1315c33ffc 
					 
					
						
						
							
							Merge pull request  #45  from freddiebarrsmith/at_exe  
						
						 
						
						... 
						
						
						
						Adding At.exe 
						
						
					 
					
						2019-10-07 23:51:57 +02:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Oddvar Moe 
							
						 
					 
					
						
						
							
						
						8eb582de42 
					 
					
						
						
							
							Update At.yml  
						
						 
						
						
						
						
					 
					
						2019-10-07 23:51:26 +02:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Ayush Sahay 
							
						 
					 
					
						
						
							
						
						134b272567 
					 
					
						
						
							
							Update devtoolslauncher.yml  
						
						 
						
						
						
						
					 
					
						2019-10-07 12:15:47 +05:30  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Ayush Sahay 
							
						 
					 
					
						
						
							
						
						0fe0504622 
					 
					
						
						
							
							Update devtoolslauncher.yml  
						
						 
						
						
						
						
					 
					
						2019-10-04 10:20:38 +05:30  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Ayush Sahay 
							
						 
					 
					
						
						
							
						
						48ed8f7914 
					 
					
						
						
							
							Create devtoolslauncher.yml  
						
						 
						
						
						
						
					 
					
						2019-10-04 09:29:59 +05:30  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								freddie 
							
						 
					 
					
						
						
							
						
						9f47e26f16 
					 
					
						
						
							
							Adding At.exe, for submission to LOLbas list, with proof of malware using it in wild :O  
						
						 
						
						
						
						
					 
					
						2019-09-21 03:19:25 +01:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Oddvar Moe 
							
						 
					 
					
						
						
							
						
						32757cd0c3 
					 
					
						
						
							
							Added Office binaries from jreegun to the project. Pull request 42  
						
						 
						
						
						
						
					 
					
						2019-09-17 22:58:03 +02:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Oddvar Moe 
							
						 
					 
					
						
						
							
						
						0644ac30d7 
					 
					
						
						
							
							Added Office binaries from jreegun to the project. Pull request 42  
						
						 
						
						
						
						
					 
					
						2019-09-17 22:44:27 +02:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Oddvar Moe 
							
						 
					 
					
						
						
							
						
						ed266c0983 
					 
					
						
						
							
							Fixed some typos  
						
						 
						
						
						
						
					 
					
						2019-09-17 20:45:49 +02:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Oddvar Moe 
							
						 
					 
					
						
						
							
						
						8762fc5735 
					 
					
						
						
							
							Acknowledgement fix for comsvcs  
						
						 
						
						
						
						
					 
					
						2019-09-16 09:50:01 +02:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Oddvar Moe 
							
						 
					 
					
						
						
							
						
						4ebf1ac4f7 
					 
					
						
						
							
							Adjusted case sensitive type in yml file for Comsvcs  
						
						 
						
						
						
						
					 
					
						2019-09-16 09:44:14 +02:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Oddvar Moe 
							
						 
					 
					
						
						
							
						
						11c6c7c48d 
					 
					
						
						
							
							Adjusted  
						
						 
						
						
						
						
					 
					
						2019-09-16 09:38:05 +02:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Oddvar Moe 
							
						 
					 
					
						
						
							
						
						f9f381d616 
					 
					
						
						
							
							Merge pull request  #44  from plowsec/master  
						
						 
						
						... 
						
						
						
						Add Comsvcs.yml: dump lsass via signed DLL. 
						
						
					 
					
						2019-09-16 09:33:40 +02:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								plowsec 
							
						 
					 
					
						
						
							
						
						dd5df7cf3e 
					 
					
						
						
							
							Add Comsvcs.yml: dump lsass via signed DLL.  
						
						 
						
						
						
						
					 
					
						2019-08-30 14:12:46 +02:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Oddvar Moe 
							
						 
					 
					
						
						
							
						
						5b63815c0a 
					 
					
						
						
							
							Updated update and squirrel with updaterollback parameter  
						
						 
						
						
						
						
					 
					
						2019-07-02 09:06:19 +02:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Oddvar Moe 
							
						 
					 
					
						
						
							
						
						8fcc9a105a 
					 
					
						
						
							
							Fixed spacing error  
						
						 
						
						
						
						
					 
					
						2019-06-28 18:07:24 +02:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Oddvar Moe 
							
						 
					 
					
						
						
							
						
						8528caf21d 
					 
					
						
						
							
							Added Acknowledgement to wsl.exe  
						
						 
						
						
						
						
					 
					
						2019-06-28 18:05:34 +02:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Oddvar Moe 
							
						 
					 
					
						
						
							
						
						f77b3b4019 
					 
					
						
						
							
							Fixed spacing issue  
						
						 
						
						
						
						
					 
					
						2019-06-28 17:53:45 +02:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Oddvar Moe 
							
						 
					 
					
						
						
							
						
						dd545693da 
					 
					
						
						
							
							Merge pull request  #40  from NotoriousRebel/master  
						
						 
						
						... 
						
						
						
						Create Wsl.yml 
						
						
					 
					
						2019-06-28 17:50:13 +02:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								NotoriousRebel 
							
						 
					 
					
						
						
							
						
						ff0155f599 
					 
					
						
						
							
							Moved Wsl.yml location to OtherMSBinaries and added another example for possible usecases.  
						
						 
						
						
						
						
					 
					
						2019-06-28 09:20:56 -04:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Oddvar Moe 
							
						 
					 
					
						
						
							
						
						e05ae6c051 
					 
					
						
						
							
							Adjusted Update and Squirrel  
						
						 
						
						
						
						
					 
					
						2019-06-28 09:05:27 +02:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Oddvar Moe 
							
						 
					 
					
						
						
							
						
						3be3e5f3f8 
					 
					
						
						
							
							Added link to reegun blog  
						
						 
						
						
						
						
					 
					
						2019-06-28 08:48:41 +02:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								NotoriousRebel 
							
						 
					 
					
						
						
							
						
						ff7dd5893b 
					 
					
						
						
							
							Added Wsl.yml  
						
						 
						
						
						
						
					 
					
						2019-06-27 15:39:12 -04:00  
					
					
						 
						
						
							
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Oddvar Moe 
							
						 
					 
					
						
						
							
						
						fa72af4532 
					 
					
						
						
							
							Update README.md  
						
						 
						
						
						
						
					 
					
						2019-06-27 17:47:21 +02:00