Wietze
|
ebbf08ec4d
|
Adding tags (closes #9, #318) (#362)
* Adding various tags as a first iteration
* Adding quotes
* Adding 'Custom Format' properly
* Updating to key:value pairs
* Update template
|
2024-04-03 11:53:36 -04:00 |
|
frack113
|
4f83231697
|
Update old sigma link (#303)
* Update SigmaHQ ref
Signed-off-by: frack113 <62423083+frack113@users.noreply.github.com>
* Update SigmaHQ ref
Signed-off-by: frack113 <62423083+frack113@users.noreply.github.com>
* Update SigmaHq ref
Signed-off-by: frack113 <62423083+frack113@users.noreply.github.com>
* Update SigmaHq ref
Signed-off-by: frack113 <62423083+frack113@users.noreply.github.com>
---------
Signed-off-by: frack113 <62423083+frack113@users.noreply.github.com>
|
2023-10-18 11:30:34 -04:00 |
|
frack113
|
e8ea28d4e9
|
Update SigmaHQ ref (#301)
Signed-off-by: frack113 <62423083+frack113@users.noreply.github.com>
|
2023-06-19 22:40:24 +01:00 |
|
frack113
|
1072d3dc34
|
Add sigma ref Detection (#272)
* Add sigma ref
* Add missing sigma ref
* Fix sigma link
* Remove by Defender
* Remove by Defender
|
2022-12-29 09:51:15 -05:00 |
|
Nasreddine Bencherchali
|
0d7efb8ead
|
Adding and updating various LOLBINS (#229)
Co-authored-by: Wietze <wietze@users.noreply.github.com>
|
2022-11-11 16:42:44 +00:00 |
|
frack113
|
01d7580886
|
Add Sigma rule references to various LOLBAS (#260)
|
2022-10-26 09:10:39 +01:00 |
|
Wietze
|
67e1040172
|
Merge remote-tracking branch 'upstream/master' into windows_11_sprint
|
2022-10-03 16:18:57 +01:00 |
|
xenoscr
|
2c3653f0c4
|
Fixing more file formatting issues.
|
2022-09-11 01:36:14 -04:00 |
|
xenoscr
|
654cdd2d61
|
Fixing file formating.
|
2022-09-11 01:33:36 -04:00 |
|
xenoscr
|
98813fe01b
|
Fixing errors found in yaml lint action.
|
2022-09-11 01:07:18 -04:00 |
|
xenoscr
|
d585695b08
|
Adding missing Descriptions.
|
2022-09-10 23:26:10 -04:00 |
|
xenoscr
|
ce36f924fc
|
Removing extra --- from each yaml file
|
2022-09-10 22:16:47 -04:00 |
|
securepeacock
|
68c14b894c
|
Update UtilityFunctions.yml (#228)
|
2022-09-02 18:42:59 +01:00 |
|
Wietze
|
e1df4e9f83
|
Merge remote-tracking branch 'upstream/master' into windows_11_sprint
|
2022-09-02 17:23:45 +01:00 |
|
Oddvar Moe
|
c5c227a7ba
|
added sigma detection for pester
|
2022-09-02 17:18:24 +01:00 |
|
Oddvar Moe
|
5a38aa722f
|
Adjusted comment in command
|
2022-09-02 17:18:24 +01:00 |
|
Oddvar Moe
|
4b99cadd85
|
Update pester.bat with an additional example
|
2022-09-02 17:18:23 +01:00 |
|
Wietze
|
400158f2df
|
Add sigma references to CL_LoadAssembly, CLMutexVerifiers entries (#221)
|
2022-09-02 17:16:58 +01:00 |
|
Oddvar Moe
|
68a6f0a35f
|
added sigma detection for pester
|
2022-08-24 12:32:48 +02:00 |
|
Oddvar Moe
|
c53a8ea06e
|
Adjusted comment in command
|
2022-08-23 15:47:17 +02:00 |
|
Oddvar Moe
|
fdc1b2c827
|
Update pester.bat with an additional example
|
2022-08-23 15:44:57 +02:00 |
|
frack113
|
91350057ce
|
Add sigma references to CL_LoadAssembly, CLMutexVerifiers entries (#221)
|
2022-06-04 11:50:35 +01:00 |
|
Wietze
|
b92ee99627
|
Addressing @bohops's feedback
|
2022-05-05 11:12:22 +01:00 |
|
Wietze
|
085aaa37b1
|
Adding more missed-out entries
|
2021-12-15 11:50:18 +00:00 |
|
Wietze
|
6793a7d238
|
Fixing various issues identified
|
2021-12-14 16:50:22 +00:00 |
|
Wietze
|
adf171d089
|
Applying minor format changes (incorrectly formatted dates, typos, etc.)
|
2021-12-14 15:53:03 +00:00 |
|
Wietze
|
754a451e76
|
Updating entries that have been confirmed to be working on Windows 11 (21H2)
|
2021-12-14 15:51:43 +00:00 |
|
Wietze
|
39d4e815af
|
Minor formatting changes (redudant backslashes, incorrect dates, typos, etc.)
|
2021-12-14 14:57:32 +00:00 |
|
bohops
|
23dd0236ae
|
Detection Resources and Other Updates (#179)
* Add detection links for scripts
* Add detection links for OtherMSBins. Fixed and updated as needed.
* Add detection links for MSBins. Fixed and updated as needed.
* Add detection links for oslibraries
* Updating template for Detections
* Removing empty Detection:Sigma entries
* Remove redundant blank line
* Replacing commit URL with file URL
Co-authored-by: root <root@DESKTOP-5CR935D.localdomain>
Co-authored-by: Wietze <wietze@users.noreply.github.com>
|
2021-11-15 08:19:03 -05:00 |
|
Wietze
|
8257d60aad
|
Realigning .ps1 scripts to T1216
|
2021-11-05 20:29:07 +00:00 |
|
Wietze
|
bc51cb4e03
|
More changes (mainly changing some T1218 instances to T1202)
|
2021-11-05 20:19:39 +00:00 |
|
Wietze
|
4f7ec8d2af
|
MITRE ATT&CK realignment sprint
|
2021-11-05 18:58:26 +00:00 |
|
Oddvar Moe
|
9f9af1cfee
|
Merge branch 'master' into feat/yamllinting
|
2021-10-22 15:20:35 +02:00 |
|
Oddvar Moe
|
a55e2249c1
|
Merge branch 'master' into fixing-yaml-issues
|
2021-10-22 14:53:09 +02:00 |
|
bohops
|
741d0f7b36
|
Update CL_LoadAssembly.yml
|
2021-09-26 23:35:01 -04:00 |
|
root
|
b5357cdec0
|
Adding app-ctrl bypass bins and a few lolscripts
|
2021-09-26 23:31:30 -04:00 |
|
Filipe Spencer Lopes
|
13901ea496
|
Too many whitespaces
|
2021-03-09 14:57:01 +01:00 |
|
Filipe Spencer Lopes
|
56035a7d10
|
Too many whitespaces
|
2021-03-09 14:56:47 +01:00 |
|
Wietze
|
14dca38278
|
Standardise date formats (see https://yaml.org/type/timestamp.html)
|
2021-01-10 15:04:52 +00:00 |
|
Oddvar Moe
|
b592be6027
|
Update Manage-bde.yml
Remove extra -
|
2020-08-15 00:17:27 +02:00 |
|
bohops
|
e316cb4842
|
Delete Slmgr - COM Hijacks are too broad
|
2020-07-03 10:15:06 -04:00 |
|
bohops
|
12cdb47285
|
Removed COM Hijack
|
2020-07-03 10:07:18 -04:00 |
|
bohops
|
17a34e27f6
|
Added Twitter reference for use "in-the-wild"
|
2020-07-03 10:03:42 -04:00 |
|
Oddvar Moe
|
22ef6bfc63
|
Added additional paths to CL_MutexVerifiers.ps1 - input from @shilpeshTrivedi
|
2020-01-07 08:45:25 +01:00 |
|
Oddvar Moe
|
94368c1e69
|
Major changes to Web portal - Small fixes to source files to adjust
|
2018-12-10 14:28:12 +01:00 |
|
Oddvar Moe
|
a61d2586cf
|
Errors in YAML files corrected
|
2018-10-25 21:24:55 +02:00 |
|
bohops
|
6381da333c
|
Added Acknowledgement
|
2018-10-04 10:08:21 -04:00 |
|
bohops
|
783b4f3d9f
|
Added AWL Bypass
|
2018-10-04 10:07:02 -04:00 |
|
Oddvar Moe
|
bac3b9e56c
|
Update scripts with new template. Fixed mgmt script for webportal. Adjustments to existing yml files
|
2018-09-26 11:41:58 +02:00 |
|
Oddvar Moe
|
c949e100bd
|
MD files generate from Script, and adjustments to readme
|
2018-09-14 15:48:52 +02:00 |
|