65 Commits

Author	SHA1	Message	Date
frack113	1072d3dc34	Add sigma ref Detection (#272) ... * Add sigma ref * Add missing sigma ref * Fix sigma link * Remove by Defender * Remove by Defender	2022-12-29 09:51:15 -05:00
Wietze	67e1040172	Merge remote-tracking branch 'upstream/master' into windows_11_sprint	2022-10-03 16:18:57 +01:00
xenoscr	654cdd2d61	Fixing file formating.	2022-09-11 01:33:36 -04:00
xenoscr	98813fe01b	Fixing errors found in yaml lint action.	2022-09-11 01:07:18 -04:00
xenoscr	c24cad7868	Adding missing OperatingSystem values.	2022-09-10 23:48:38 -04:00
xenoscr	371d1cf2cc	Correcting case in Usecase key names.	2022-09-10 23:45:28 -04:00
xenoscr	a040ca3e40	Adding missing OperatingSystem values to Ieadvpack.yml	2022-09-10 23:41:38 -04:00
xenoscr	f5baac1c45	Adding missing authors	2022-09-10 23:37:10 -04:00
xenoscr	0ed1694bf1	Correcting 'AWL bypass' to 'AWL Bypass'	2022-09-10 22:55:32 -04:00
xenoscr	ce36f924fc	Removing extra --- from each yaml file	2022-09-10 22:16:47 -04:00
Wietze	7797a1967c	Merge branch 'master' into windows_11_sprint	2022-05-24 08:38:50 +01:00
Chris "Lopi" Spehn	e872ce028b	Merge pull request #214 from jstnk9/master ... Added new sigma rule and references to desk.cpl	2022-05-19 10:21:21 -06:00
Wietze	b333db4f91	Fixing typo (ieaframe -> ieframe)	2022-05-15 21:06:33 +01:00
jstnk9	00bc9177bd	Added new sigma rule and references ... Added new sigma rule and references	2022-05-15 16:42:44 +02:00
Wietze	2b20998371	Remove redundant powershell command from comsvcs entry	2022-05-05 11:18:39 +01:00
Wietze	b92ee99627	Addressing @bohops's feedback	2022-05-05 11:12:22 +01:00
bohops	d93539bf9b	Quick fix for syntax and removed IOC	2022-04-29 23:06:41 -04:00
cr1sp4	666e6e8645	Update Desk.yml (#210) ... Added Sigma rules.	2022-04-29 22:52:57 -04:00
Wietze	619aafbfa2	Adding extra contributor to Desk.cpl entry	2022-04-28 13:01:35 +01:00
Wietze	4a8bdf4844	Fix casing on Desk.cpl entry	2022-04-27 11:20:13 +01:00
LuxNoBu!!shit	6ed0fb9326	Create Desk.cpl (#207) ... Co-authored-by: Wietze <wietze@users.noreply.github.com>	2022-04-27 11:15:15 +01:00
Wietze	085aaa37b1	Adding more missed-out entries	2021-12-15 11:50:18 +00:00
Wietze	6793a7d238	Fixing various issues identified	2021-12-14 16:50:22 +00:00
Wietze	adf171d089	Applying minor format changes (incorrectly formatted dates, typos, etc.)	2021-12-14 15:53:03 +00:00
Wietze	754a451e76	Updating entries that have been confirmed to be working on Windows 11 (21H2)	2021-12-14 15:51:43 +00:00
Wietze	39d4e815af	Minor formatting changes (redudant backslashes, incorrect dates, typos, etc.)	2021-12-14 14:57:32 +00:00
bohops	23dd0236ae	Detection Resources and Other Updates (#179) ... * Add detection links for scripts * Add detection links for OtherMSBins. Fixed and updated as needed. * Add detection links for MSBins. Fixed and updated as needed. * Add detection links for oslibraries * Updating template for Detections * Removing empty Detection:Sigma entries * Remove redundant blank line * Replacing commit URL with file URL Co-authored-by: root <root@DESKTOP-5CR935D.localdomain> Co-authored-by: Wietze <wietze@users.noreply.github.com>	2021-11-15 08:19:03 -05:00
Wietze	2380c506d4	LSASS realign to T1003.001	2021-11-05 20:35:58 +00:00
Wietze	4f7ec8d2af	MITRE ATT&CK realignment sprint	2021-11-05 18:58:26 +00:00
Oddvar Moe	9f9af1cfee	Merge branch 'master' into feat/yamllinting	2021-10-22 15:20:35 +02:00
Filipe Spencer Lopes	b0a321e4c4	Too many whitespaces	2021-03-09 14:58:44 +01:00
Filipe Spencer Lopes	a232cfa007	Too many empty lines	2021-03-09 14:57:47 +01:00
Wietze	2e08819eef	Fix Usecase field	2021-01-10 15:54:00 +00:00
Wietze	5ec4de562b	Fixed acknowledgements	2021-01-10 15:45:25 +00:00
Wietze	38f9a0a032	Fixed incorrect MItreLink	2021-01-10 15:26:27 +00:00
Wietze	14dca38278	Standardise date formats (see https://yaml.org/type/timestamp.html)	2021-01-10 15:04:52 +00:00
Oddvar Moe	ed266c0983	Fixed some typos	2019-09-17 20:45:49 +02:00
Oddvar Moe	8762fc5735	Acknowledgement fix for comsvcs	2019-09-16 09:50:01 +02:00
Oddvar Moe	4ebf1ac4f7	Adjusted case sensitive type in yml file for Comsvcs	2019-09-16 09:44:14 +02:00
Oddvar Moe	11c6c7c48d	Adjusted	2019-09-16 09:38:05 +02:00
plowsec	dd5df7cf3e	Add Comsvcs.yml: dump lsass via signed DLL.	2019-08-30 14:12:46 +02:00
Oddvar Moe	94368c1e69	Major changes to Web portal - Small fixes to source files to adjust	2018-12-10 14:28:12 +01:00
bohops	f8e9ac5a0a	Fixed a few categories	2018-09-26 10:33:52 -04:00
Oddvar Moe	bac3b9e56c	Update scripts with new template. Fixed mgmt script for webportal. Adjustments to existing yml files	2018-09-26 11:41:58 +02:00
Oddvar Moe	f8fec9849b	Minor adjustments to be yaml compliant	2018-09-24 23:18:00 +02:00
bohops	68884a4c13	Update Zipfldr.yml	2018-09-24 14:36:13 -04:00
bohops	679a8a66bb	Update Url.yml	2018-09-24 14:35:06 -04:00
bohops	d045db1755	Update Url.yml	2018-09-24 14:34:40 -04:00
bohops	9c3dbada06	Update Setupapi.yml	2018-09-24 14:32:16 -04:00
bohops	ceebe9a9b9	Update Shdocvw.yml	2018-09-24 14:31:32 -04:00