Wietze 2cc0ee99e6

Applying MITRE ATT&CK v15 changes (#370) ...

https://attack.mitre.org/resources/updates/updates-april-2024/

2024-04-24 15:10:59 +01:00

..

AccCheckConsole.yml

Adding tags (closes #9, #318) (#362)

2024-04-03 11:53:36 -04:00

Adplus.yml

Several LOLBINs additions & modifications (#192)

2023-03-31 13:46:21 +01:00

Agentexecutor.yml

Add sigma ref Detection (#272)

2022-12-29 09:51:15 -05:00

Appcert.yml

Create Appcert.yml (#361)

2024-03-31 18:56:11 +01:00

Appvlp.yml

Adding tags (closes #9, #318) (#362)

2024-04-03 11:53:36 -04:00

Bginfo.yml

Adding tags (closes #9, #318) (#362)

2024-04-03 11:53:36 -04:00

Cdb.yml

Update old sigma link (#303)

2023-10-18 11:30:34 -04:00

Coregen.yml

Adding tags (closes #9, #318) (#362)

2024-04-03 11:53:36 -04:00

Createdump.yml

Update old sigma link (#303)

2023-10-18 11:30:34 -04:00

Csi.yml

Update old sigma link (#303)

2023-10-18 11:30:34 -04:00

DefaultPack.yml

Add Sigma ref

2023-06-10 08:12:12 +02:00

Devinit.yml

Add Sigma ref

2023-06-10 08:12:12 +02:00

Devtoolslauncher.yml

Update old sigma link (#303)

2023-10-18 11:30:34 -04:00

devtunnels.yml

DevTunnels - Other MS Binary for Data Exfiltration (#327)

2023-10-15 00:05:54 +02:00

Dnx.yml

Update old sigma link (#303)

2023-10-18 11:30:34 -04:00

Dotnet.yml

Update old sigma link (#303)

2023-10-18 11:30:34 -04:00

Dsdbutil.yml

Add files via upload

2023-08-23 02:50:03 -04:00

Dump64.yml

Update old sigma link (#303)

2023-10-18 11:30:34 -04:00

DumpMinitool.yml

Add Sigma ref

2023-06-10 08:12:12 +02:00

Dxcap.yml

Update old sigma link (#303)

2023-10-18 11:30:34 -04:00

Excel.yml

Adding tags (closes #9, #318) (#362)

2024-04-03 11:53:36 -04:00

Fsi.yml

Add missing document starts and add yamllint rule (#305)

2023-06-23 20:55:39 +01:00

FsiAnyCpu.yml

Update FsiAnyCpu.yml with Sigma (#225)

2022-12-28 23:50:51 -05:00

Mftrace.yml

Add sigma ref Detection (#272)

2022-12-29 09:51:15 -05:00

Microsoft.NodejsTools.PressAnyKey.yml

Add Sigma ref

2023-06-10 08:12:12 +02:00

Msaccess.yml

Add MSAccess as a new downloader (#288)

2024-04-05 19:18:57 +01:00

Msdeploy.yml

Update old sigma link (#303)

2023-10-18 11:30:34 -04:00

MsoHtmEd.yml

Adding tags (closes #9, #318) (#362)

2024-04-03 11:53:36 -04:00

Mspub.yml

Adding tags (closes #9, #318) (#362)

2024-04-03 11:53:36 -04:00

Msxsl.yml

Update old sigma link (#303)

2023-10-18 11:30:34 -04:00

Ntdsutil.yml

Update old sigma link (#303)

2023-10-18 11:30:34 -04:00

OpenConsole.yml

Adding and updating various LOLBINS (#229)

2022-11-11 16:42:44 +00:00

Powerpnt.yml

Adding tags (closes #9, #318) (#362)

2024-04-03 11:53:36 -04:00

Procdump.yml

Adding tags (closes #9, #318) (#362)

2024-04-03 11:53:36 -04:00

ProtocolHandler.yml

Update ProtocolHandler.yml (#267)

2023-06-17 22:18:06 +01:00

Rcsi.yml

Update old sigma link (#303)

2023-10-18 11:30:34 -04:00

Remote.yml

Add sigma ref Detection (#272)

2022-12-29 09:51:15 -05:00

Sqldumper.yml

Update old sigma link (#303)

2023-10-18 11:30:34 -04:00

Sqlps.yml

Update old sigma link (#303)

2023-10-18 11:30:34 -04:00

Sqltoolsps.yml

Update old sigma link (#303)

2023-10-18 11:30:34 -04:00

Squirrel.yml

Update old sigma link (#303)

2023-10-18 11:30:34 -04:00

Te.yml

Adding tags (closes #9, #318) (#362)

2024-04-03 11:53:36 -04:00

Teams.yml

Applying MITRE ATT&CK v15 changes (#370)

2024-04-24 15:10:59 +01:00

Testwindowremoteagent.yml

Renaming vshadow file

2023-10-03 17:38:41 +01:00

Tracker.yml

Adding tags (closes #9, #318) (#362)

2024-04-03 11:53:36 -04:00

Update.yml

Update SigmaHQ ref (#301)

2023-06-19 22:40:24 +01:00

VisualUiaVerifyNative.yml

Add missing document starts and add yamllint rule (#305)

2023-06-23 20:55:39 +01:00

VSDiagnostics.yml

VSDiagnostics Execute lolbin (#309)

2023-08-05 17:18:48 +01:00

Vshadow.yml

Fixing command attribute on Vshadow

2023-10-03 17:41:18 +01:00

VSIISExeLauncher.yml

Add sigma ref Detection (#272)

2022-12-29 09:51:15 -05:00

Vsjitdebugger.yml

Update old sigma link (#303)

2023-10-18 11:30:34 -04:00

vsls-agent.yml

Adding tags (closes #9, #318) (#362)

2024-04-03 11:53:36 -04:00

vstest.console.yml

Adding tags (closes #9, #318) (#362)

2024-04-03 11:53:36 -04:00

Wfc.yml

Update Wfc.yml with Sigma (#223)

2022-12-29 00:22:39 -05:00

Winproj.yml

Add Winproj.exe as a downloader (#351)

2024-04-05 19:19:49 +01:00

Winword.yml

Adding tags (closes #9, #318) (#362)

2024-04-03 11:53:36 -04:00

Wsl.yml

Update old sigma link (#303)

2023-10-18 11:30:34 -04:00