public-mirrors/LOLBAS
1
0
Fork 0
mirror of https://github.com/LOLBAS-Project/LOLBAS synced 2025-03-14 19:38:33 +01:00
Code Issues Projects Releases Wiki Activity
LOLBAS/yml/OSBinaries
History
Daniel Gott 9814c950c8
Update Mofcomp.yml 
Added additional resources for detection via PowerShell etc
2022-07-19 13:13:39 -04:00
..
AppInstaller.yml
Adding new Sigma references (AppInstaller, AspnetCompiler, Bash, Certreq) (#183)
2021-11-25 09:42:26 +00:00
Aspnet_Compiler.yml
Adding new Sigma references (AppInstaller, AspnetCompiler, Bash, Certreq) (#183)
2021-11-25 09:42:26 +00:00
At.yml
Detection Resources and Other Updates (#179)
2021-11-15 08:19:03 -05:00
Atbroker.yml
Detection Resources and Other Updates (#179)
2021-11-15 08:19:03 -05:00
Bash.yml
Adding new Sigma references (AppInstaller, AspnetCompiler, Bash, Certreq) (#183)
2021-11-25 09:42:26 +00:00
Bitsadmin.yml
Detection Resources and Other Updates (#179)
2021-11-15 08:19:03 -05:00
Certoc.yml
Detection Resources and Other Updates (#179)
2021-11-15 08:19:03 -05:00
Certreq.yml
Adding new Sigma references (AppInstaller, AspnetCompiler, Bash, Certreq) (#183)
2021-11-25 09:42:26 +00:00
Certutil.yml
Detection Resources and Other Updates (#179)
2021-11-15 08:19:03 -05:00
Cmd.yml
Detection Resources and Other Updates (#179)
2021-11-15 08:19:03 -05:00
Cmdkey.yml
Detection Resources and Other Updates (#179)
2021-11-15 08:19:03 -05:00
Cmdl32.yml
Detection Resources and Other Updates (#179)
2021-11-15 08:19:03 -05:00
Cmstp.yml
Detection Resources and Other Updates (#179)
2021-11-15 08:19:03 -05:00
ConfigSecurityPolicy.yml
Adding Sigma references to ConfigSecurityPolicy, Diantz, ExtExport & Extrac32 (#184)
2021-12-06 11:19:01 +00:00
Conhost.yml
Add Sigma references to conhost, imewdbld, ie4uinit, ilasm, offlinescannershell and replace (#219)
2022-05-23 12:35:58 +01:00
Control.yml
Detection Resources and Other Updates (#179)
2021-11-15 08:19:03 -05:00
Csc.yml
Detection Resources and Other Updates (#179)
2021-11-15 08:19:03 -05:00
Cscript.yml
Detection Resources and Other Updates (#179)
2021-11-15 08:19:03 -05:00
DataSvcUtil.yml
Detection Resources and Other Updates (#179)
2021-11-15 08:19:03 -05:00
Desktopimgdownldr.yml
Detection Resources and Other Updates (#179)
2021-11-15 08:19:03 -05:00
Dfsvc.yml
Detection Resources and Other Updates (#179)
2021-11-15 08:19:03 -05:00
Diantz.yml
Adding Sigma references to ConfigSecurityPolicy, Diantz, ExtExport & Extrac32 (#184)
2021-12-06 11:19:01 +00:00
Diskshadow.yml
Detection Resources and Other Updates (#179)
2021-11-15 08:19:03 -05:00
Dnscmd.yml
Detection Resources and Other Updates (#179)
2021-11-15 08:19:03 -05:00
Esentutl.yml
Detection Resources and Other Updates (#179)
2021-11-15 08:19:03 -05:00
Eventvwr.yml
Detection Resources and Other Updates (#179)
2021-11-15 08:19:03 -05:00
Expand.yml
Detection Resources and Other Updates (#179)
2021-11-15 08:19:03 -05:00
Explorer.yml
Detection Resources and Other Updates (#179)
2021-11-15 08:19:03 -05:00
Extexport.yml
Adding Sigma references to ConfigSecurityPolicy, Diantz, ExtExport & Extrac32 (#184)
2021-12-06 11:19:01 +00:00
Extrac32.yml
Adding Sigma references to ConfigSecurityPolicy, Diantz, ExtExport & Extrac32 (#184)
2021-12-06 11:19:01 +00:00
Findstr.yml
Changed tid to T1105 for downloads (#195)
2022-05-15 20:38:24 +01:00
Finger.yml
Detection Resources and Other Updates (#179)
2021-11-15 08:19:03 -05:00
FltMC.yml
Detection Resources and Other Updates (#179)
2021-11-15 08:19:03 -05:00
Forfiles.yml
Detection Resources and Other Updates (#179)
2021-11-15 08:19:03 -05:00
Ftp.yml
Detection Resources and Other Updates (#179)
2021-11-15 08:19:03 -05:00
GfxDownloadWrapper.yml
Detection Resources and Other Updates (#179)
2021-11-15 08:19:03 -05:00
Gpscript.yml
Adding various Sigma references (#213)
2022-05-17 09:18:45 +01:00
Hh.yml
Update Hh.yml
2022-05-24 15:29:03 -07:00
Ie4uinit.yml
Add Sigma references to conhost, imewdbld, ie4uinit, ilasm, offlinescannershell and replace (#219)
2022-05-23 12:35:58 +01:00
Ieexec.yml
Detection Resources and Other Updates (#179)
2021-11-15 08:19:03 -05:00
Ilasm.yml
Add Sigma references to conhost, imewdbld, ie4uinit, ilasm, offlinescannershell and replace (#219)
2022-05-23 12:35:58 +01:00
IMEWDBLD.yml
Add Sigma references to conhost, imewdbld, ie4uinit, ilasm, offlinescannershell and replace (#219)
2022-05-23 12:35:58 +01:00
Infdefaultinstall.yml
Detection Resources and Other Updates (#179)
2021-11-15 08:19:03 -05:00
Installutil.yml
Detection Resources and Other Updates (#179)
2021-11-15 08:19:03 -05:00
Jsc.yml
Adding various Sigma references (#213)
2022-05-17 09:18:45 +01:00
Makecab.yml
Detection Resources and Other Updates (#179)
2021-11-15 08:19:03 -05:00
Mavinject.yml
Detection Resources and Other Updates (#179)
2021-11-15 08:19:03 -05:00
Microsoft.Workflow.Compiler.yml
Detection Resources and Other Updates (#179)
2021-11-15 08:19:03 -05:00
Mmc.yml
Detection Resources and Other Updates (#179)
2021-11-15 08:19:03 -05:00
Mofcomp.yml
Update Mofcomp.yml
2022-07-19 13:13:39 -04:00
MpCmdRun.yml
Detection Resources and Other Updates (#179)
2021-11-15 08:19:03 -05:00
Msbuild.yml
Detection Resources and Other Updates (#179)
2021-11-15 08:19:03 -05:00
Msconfig.yml
Detection Resources and Other Updates (#179)
2021-11-15 08:19:03 -05:00
Msdt.yml
Detection Resources and Other Updates (#179)
2021-11-15 08:19:03 -05:00
Mshta.yml
Detection Resources and Other Updates (#179)
2021-11-15 08:19:03 -05:00
Msiexec.yml
Detection Resources and Other Updates (#179)
2021-11-15 08:19:03 -05:00
Netsh.yml
Detection Resources and Other Updates (#179)
2021-11-15 08:19:03 -05:00
Odbcconf.yml
Odbcconf realign to T1218.008, hh.exe to T1218.001
2021-11-16 14:09:37 +00:00
OfflineScannerShell.yml
Add Sigma references to conhost, imewdbld, ie4uinit, ilasm, offlinescannershell and replace (#219)
2022-05-23 12:35:58 +01:00
OneDriveStandaloneUpdater.yml
MITRE ATT&CK realignment sprint
2021-11-05 18:58:26 +00:00
Pcalua.yml
Detection Resources and Other Updates (#179)
2021-11-15 08:19:03 -05:00
Pcwrun.yml
Detection Resources and Other Updates (#179)
2021-11-15 08:19:03 -05:00
Pktmon.yml
Adding various Sigma references (#213)
2022-05-17 09:18:45 +01:00
Pnputil.yml
Detection Resources and Other Updates (#179)
2021-11-15 08:19:03 -05:00
Presentationhost.yml
Detection Resources and Other Updates (#179)
2021-11-15 08:19:03 -05:00
Print.yml
Detection Resources and Other Updates (#179)
2021-11-15 08:19:03 -05:00
PrintBrm.yml
Adding various Sigma references (#213)
2022-05-17 09:18:45 +01:00
Psr.yml
Detection Resources and Other Updates (#179)
2021-11-15 08:19:03 -05:00
Rasautou.yml
Detection Resources and Other Updates (#179)
2021-11-15 08:19:03 -05:00
Rdrleakdiag.yml
Update Rdrleakdiag.yml
2022-05-19 13:30:11 +00:00
Reg.yml
Detection Resources and Other Updates (#179)
2021-11-15 08:19:03 -05:00
Regasm.yml
Detection Resources and Other Updates (#179)
2021-11-15 08:19:03 -05:00
Regedit.yml
Detection Resources and Other Updates (#179)
2021-11-15 08:19:03 -05:00
Regini.yml
Detection Resources and Other Updates (#179)
2021-11-15 08:19:03 -05:00
Register-cimprovider.yml
Adding various Sigma references (#213)
2022-05-17 09:18:45 +01:00
Regsvcs.yml
Detection Resources and Other Updates (#179)
2021-11-15 08:19:03 -05:00
Regsvr32.yml
Detection Resources and Other Updates (#179)
2021-11-15 08:19:03 -05:00
Replace.yml
Add Sigma references to conhost, imewdbld, ie4uinit, ilasm, offlinescannershell and replace (#219)
2022-05-23 12:35:58 +01:00
Rpcping.yml
Detection Resources and Other Updates (#179)
2021-11-15 08:19:03 -05:00
Rundll32.yml
Detection Resources and Other Updates (#179)
2021-11-15 08:19:03 -05:00
Runonce.yml
Detection Resources and Other Updates (#179)
2021-11-15 08:19:03 -05:00
Runscripthelper.yml
Detection Resources and Other Updates (#179)
2021-11-15 08:19:03 -05:00
Sc.yml
Detection Resources and Other Updates (#179)
2021-11-15 08:19:03 -05:00
Schtasks.yml
Detection Resources and Other Updates (#179)
2021-11-15 08:19:03 -05:00
Scriptrunner.yml
Detection Resources and Other Updates (#179)
2021-11-15 08:19:03 -05:00
SettingSyncHost.yml
Detection Resources and Other Updates (#179)
2021-11-15 08:19:03 -05:00
Stordiag.yml
Detection Resources and Other Updates (#179)
2021-11-15 08:19:03 -05:00
Syncappvpublishingserver.yml
Detection Resources and Other Updates (#179)
2021-11-15 08:19:03 -05:00
Ttdinject.yml
Adding various Sigma references (#213)
2022-05-17 09:18:45 +01:00
Tttracer.yml
Detection Resources and Other Updates (#179)
2021-11-15 08:19:03 -05:00
Vbc.yml
Detection Resources and Other Updates (#179)
2021-11-15 08:19:03 -05:00
Verclsid.yml
Detection Resources and Other Updates (#179)
2021-11-15 08:19:03 -05:00
Wab.yml
Detection Resources and Other Updates (#179)
2021-11-15 08:19:03 -05:00
Wlrmdr.yml
Adding various Sigma references (#213)
2022-05-17 09:18:45 +01:00
Wmic.yml
Detection Resources and Other Updates (#179)
2021-11-15 08:19:03 -05:00
WorkFolders.yml
Detection Resources and Other Updates (#179)
2021-11-15 08:19:03 -05:00
Wscript.yml
Detection Resources and Other Updates (#179)
2021-11-15 08:19:03 -05:00
Wsreset.yml
Detection Resources and Other Updates (#179)
2021-11-15 08:19:03 -05:00
Wuauclt.yml
Changing ATT&CK TID of wuauclt.exe entry (#193)
2022-01-23 22:24:59 +00:00
Xwizard.yml
Detection Resources and Other Updates (#179)
2021-11-15 08:19:03 -05:00