LOLBAS

AppInstaller.yml

Merge branch 'master' into windows_11_sprint

2021-12-14 17:39:36 +00:00

Aspnet_Compiler.yml

Merge branch 'master' into windows_11_sprint

2021-12-14 17:39:36 +00:00

At.yml

Detection Resources and Other Updates (#179 )

2021-11-15 08:19:03 -05:00

Atbroker.yml

Applying minor format changes (incorrectly formatted dates, typos, etc.)

2021-12-14 15:53:03 +00:00

Bash.yml

Adding new Sigma references (AppInstaller, AspnetCompiler, Bash, Certreq) (#183 )

2021-11-25 09:42:26 +00:00

Bitsadmin.yml

Updating entries that have been confirmed to be working on Windows 11 (21H2)

2021-12-14 15:51:43 +00:00

Certoc.yml

Detection Resources and Other Updates (#179 )

2021-11-15 08:19:03 -05:00

Certreq.yml

Merge branch 'master' into windows_11_sprint

2021-12-14 17:39:36 +00:00

Certutil.yml

Updating entries that have been confirmed to be working on Windows 11 (21H2)

2021-12-14 15:51:43 +00:00

Cmd.yml

Updating entries that have been confirmed to be working on Windows 11 (21H2)

2021-12-14 15:51:43 +00:00

Cmdkey.yml

Updating entries that have been confirmed to be working on Windows 11 (21H2)

2021-12-14 15:51:43 +00:00

Cmdl32.yml

Applying minor format changes (incorrectly formatted dates, typos, etc.)

2021-12-14 15:53:03 +00:00

Cmstp.yml

Updating entries that have been confirmed to be working on Windows 11 (21H2)

2021-12-14 15:51:43 +00:00

ConfigSecurityPolicy.yml

Merge branch 'master' into windows_11_sprint

2021-12-14 17:39:36 +00:00

Conhost.yml

Add Sigma references to conhost, imewdbld, ie4uinit, ilasm, offlinescannershell and replace (#219 )

2022-05-23 12:35:58 +01:00

Control.yml

Updating entries that have been confirmed to be working on Windows 11 (21H2)

2021-12-14 15:51:43 +00:00

Csc.yml

Updating entries that have been confirmed to be working on Windows 11 (21H2)

2021-12-14 15:51:43 +00:00

Cscript.yml

Fixing various issues identified

2021-12-14 16:50:22 +00:00

DataSvcUtil.yml

Minor formatting changes (redudant backslashes, incorrect dates, typos, etc.)

2021-12-14 14:57:32 +00:00

Desktopimgdownldr.yml

Updating entries that have been confirmed to be working on Windows 11 (21H2)

2021-12-14 15:51:43 +00:00

Dfsvc.yml

Updating entries that have been confirmed to be working on Windows 11 (21H2)

2021-12-14 15:51:43 +00:00

Diantz.yml

Adding Sigma references to ConfigSecurityPolicy, Diantz, ExtExport & Extrac32 (#184 )

2021-12-06 11:19:01 +00:00

Diskshadow.yml

Detection Resources and Other Updates (#179 )

2021-11-15 08:19:03 -05:00

Dllhost.yml

Minor formatting changes (redudant backslashes, incorrect dates, typos, etc.)

2021-12-14 14:57:32 +00:00

Dnscmd.yml

Detection Resources and Other Updates (#179 )

2021-11-15 08:19:03 -05:00

Esentutl.yml

Updating entries that have been confirmed to be working on Windows 11 (21H2)

2021-12-14 15:51:43 +00:00

Eventvwr.yml

Detection Resources and Other Updates (#179 )

2021-11-15 08:19:03 -05:00

Expand.yml

Updating entries that have been confirmed to be working on Windows 11 (21H2)

2021-12-14 15:51:43 +00:00

Explorer.yml

Updating entries that have been confirmed to be working on Windows 11 (21H2)

2021-12-14 15:51:43 +00:00

Extexport.yml

Merge branch 'master' into windows_11_sprint

2021-12-14 17:39:36 +00:00

Extrac32.yml

Merge branch 'master' into windows_11_sprint

2021-12-14 17:39:36 +00:00

Findstr.yml

Changed tid to T1105 for downloads (#195 )

2022-05-15 20:38:24 +01:00

Finger.yml

Adding more missed-out entries

2021-12-15 11:50:18 +00:00

FltMC.yml

Applying minor format changes (incorrectly formatted dates, typos, etc.)

2021-12-14 15:53:03 +00:00

Forfiles.yml

Updating entries that have been confirmed to be working on Windows 11 (21H2)

2021-12-14 15:51:43 +00:00

Ftp.yml

Updating entries that have been confirmed to be working on Windows 11 (21H2)

2021-12-14 15:51:43 +00:00

GfxDownloadWrapper.yml

Detection Resources and Other Updates (#179 )

2021-11-15 08:19:03 -05:00

Gpscript.yml

Merge branch 'master' into windows_11_sprint

2022-05-24 08:38:50 +01:00

Hh.yml

Merge branch 'master' into windows_11_sprint

2022-05-25 09:25:42 +01:00

Ie4uinit.yml

Merge branch 'master' into windows_11_sprint

2022-05-24 08:38:50 +01:00

Ieexec.yml

Detection Resources and Other Updates (#179 )

2021-11-15 08:19:03 -05:00

Ilasm.yml

Merge branch 'master' into windows_11_sprint

2022-05-24 08:38:50 +01:00

IMEWDBLD.yml

Merge branch 'master' into windows_11_sprint

2022-05-24 08:38:50 +01:00

Infdefaultinstall.yml

Fixing various issues identified

2021-12-14 16:50:22 +00:00

Installutil.yml

Updating entries that have been confirmed to be working on Windows 11 (21H2)

2021-12-14 15:51:43 +00:00

Jsc.yml

Merge branch 'master' into windows_11_sprint

2022-05-24 08:38:50 +01:00

Makecab.yml

Updating entries that have been confirmed to be working on Windows 11 (21H2)

2021-12-14 15:51:43 +00:00

Mavinject.yml

Updating entries that have been confirmed to be working on Windows 11 (21H2)

2021-12-14 15:51:43 +00:00

Microsoft.Workflow.Compiler.yml

Adding more missed-out entries

2021-12-15 11:50:18 +00:00

Mmc.yml

Addressing @bohops's feedback

2022-05-05 11:12:22 +01:00

MpCmdRun.yml

Minor formatting changes (redudant backslashes, incorrect dates, typos, etc.)

2021-12-14 14:57:32 +00:00

Msbuild.yml

Addressing @bohops's feedback

2022-05-05 11:12:22 +01:00

Msconfig.yml

Detection Resources and Other Updates (#179 )

2021-11-15 08:19:03 -05:00

Msdt.yml

Updating entries that have been confirmed to be working on Windows 11 (21H2)

2021-12-14 15:51:43 +00:00

Mshta.yml

Addressing @bohops's feedback

2022-05-05 11:12:22 +01:00

Msiexec.yml

Updating entries that have been confirmed to be working on Windows 11 (21H2)

2021-12-14 15:51:43 +00:00

Netsh.yml

Fixing various issues identified

2021-12-14 16:50:22 +00:00

Odbcconf.yml

Fixing various issues identified

2021-12-14 16:50:22 +00:00

OfflineScannerShell.yml

Merge branch 'master' into windows_11_sprint

2022-05-24 08:38:50 +01:00

OneDriveStandaloneUpdater.yml

Minor formatting changes (redudant backslashes, incorrect dates, typos, etc.)

2021-12-14 14:57:32 +00:00

Pcalua.yml

Updating entries that have been confirmed to be working on Windows 11 (21H2)

2021-12-14 15:51:43 +00:00

Pcwrun.yml

Updating entries that have been confirmed to be working on Windows 11 (21H2)

2021-12-14 15:51:43 +00:00

Pktmon.yml

Merge branch 'master' into windows_11_sprint

2022-05-24 08:38:50 +01:00

Pnputil.yml

Adding Windows 11 reference to missed-out executables

2021-12-14 16:57:56 +00:00

Presentationhost.yml

Detection Resources and Other Updates (#179 )

2021-11-15 08:19:03 -05:00

Print.yml

Updating entries that have been confirmed to be working on Windows 11 (21H2)

2021-12-14 15:51:43 +00:00

PrintBrm.yml

Merge branch 'master' into windows_11_sprint

2022-05-24 08:38:50 +01:00

Psr.yml

Detection Resources and Other Updates (#179 )

2021-11-15 08:19:03 -05:00

Rasautou.yml

Detection Resources and Other Updates (#179 )

2021-11-15 08:19:03 -05:00

Rdrleakdiag.yml

Update Rdrleakdiag.yml

2022-05-19 13:30:11 +00:00

Reg.yml

Updating entries that have been confirmed to be working on Windows 11 (21H2)

2021-12-14 15:51:43 +00:00

Regasm.yml

Updating entries that have been confirmed to be working on Windows 11 (21H2)

2021-12-14 15:51:43 +00:00

Regedit.yml

Fixing various issues identified

2021-12-14 16:50:22 +00:00

Regini.yml

Updating entries that have been confirmed to be working on Windows 11 (21H2)

2021-12-14 15:51:43 +00:00

Register-cimprovider.yml

Merge branch 'master' into windows_11_sprint

2022-05-24 08:38:50 +01:00

Regsvcs.yml

Fixing various issues identified

2021-12-14 16:50:22 +00:00

Regsvr32.yml

Updating entries that have been confirmed to be working on Windows 11 (21H2)

2021-12-14 15:51:43 +00:00

Replace.yml

Merge branch 'master' into windows_11_sprint

2022-05-24 08:38:50 +01:00

Rpcping.yml

Updating entries that have been confirmed to be working on Windows 11 (21H2)

2021-12-14 15:51:43 +00:00

Rundll32.yml

Fixing various issues identified

2021-12-14 16:50:22 +00:00

Runonce.yml

Updating entries that have been confirmed to be working on Windows 11 (21H2)

2021-12-14 15:51:43 +00:00

Runscripthelper.yml

Detection Resources and Other Updates (#179 )

2021-11-15 08:19:03 -05:00

Sc.yml

Updating entries that have been confirmed to be working on Windows 11 (21H2)

2021-12-14 15:51:43 +00:00

Schtasks.yml

Adding more missed-out entries

2021-12-15 11:50:18 +00:00

Scriptrunner.yml

Updating entries that have been confirmed to be working on Windows 11 (21H2)

2021-12-14 15:51:43 +00:00

SettingSyncHost.yml

Minor formatting changes (redudant backslashes, incorrect dates, typos, etc.)

2021-12-14 14:57:32 +00:00

Stordiag.yml

Applying minor format changes (incorrectly formatted dates, typos, etc.)

2021-12-14 15:53:03 +00:00

Syncappvpublishingserver.yml

Detection Resources and Other Updates (#179 )

2021-11-15 08:19:03 -05:00

Ttdinject.yml

Merge branch 'master' into windows_11_sprint

2022-05-24 08:38:50 +01:00

Tttracer.yml

Adding Windows 11 reference to missed-out executables

2021-12-14 16:57:56 +00:00

Vbc.yml

Fixing various issues identified

2021-12-14 16:50:22 +00:00

Verclsid.yml

Updating entries that have been confirmed to be working on Windows 11 (21H2)

2021-12-14 15:51:43 +00:00

Wab.yml

Updating entries that have been confirmed to be working on Windows 11 (21H2)

2021-12-14 15:51:43 +00:00

Wlrmdr.yml

Adding various Sigma references (#213 )

2022-05-17 09:18:45 +01:00

Wmic.yml

Addressing @bohops's feedback

2022-05-05 11:12:22 +01:00

WorkFolders.yml

Applying minor format changes (incorrectly formatted dates, typos, etc.)

2021-12-14 15:53:03 +00:00

Wscript.yml

Fixing various issues identified

2021-12-14 16:50:22 +00:00

Wsreset.yml

Updating entries that have been confirmed to be working on Windows 11 (21H2)

2021-12-14 15:51:43 +00:00

Wuauclt.yml

Changing ATT&CK TID of wuauclt.exe entry (#193 )

2022-01-23 22:24:59 +00:00

Xwizard.yml

Fixing various issues identified

2021-12-14 16:50:22 +00:00