Kamran Saifullah - Frog Man b13eb6f4fd

DevTunnels - Other MS Binary for Data Exfiltration (#327) ...

* Add files via upload

* updated devtunnels.yml

* Update devtunnels.yml

* Update devtunnels.yml

* Update devtunnels.yml

* Updated Priviliges

2023-10-15 00:05:54 +02:00

..

AccCheckConsole.yml

Add sigma ref Detection (#272)

2022-12-29 09:51:15 -05:00

Adplus.yml

Several LOLBINs additions & modifications (#192)

2023-03-31 13:46:21 +01:00

Agentexecutor.yml

Add sigma ref Detection (#272)

2022-12-29 09:51:15 -05:00

Appvlp.yml

Removing extra --- from each yaml file

2022-09-10 22:16:47 -04:00

Bginfo.yml

Removing extra --- from each yaml file

2022-09-10 22:16:47 -04:00

Cdb.yml

Several LOLBINs additions & modifications (#192)

2023-03-31 13:46:21 +01:00

Coregen.yml

Add Sigma ref

2023-06-10 08:12:12 +02:00

Createdump.yml

Several LOLBINs additions & modifications (#192)

2023-03-31 13:46:21 +01:00

Csi.yml

Removing extra --- from each yaml file

2022-09-10 22:16:47 -04:00

DefaultPack.yml

Add Sigma ref

2023-06-10 08:12:12 +02:00

Devinit.yml

Add Sigma ref

2023-06-10 08:12:12 +02:00

Devtoolslauncher.yml

Removing extra --- from each yaml file

2022-09-10 22:16:47 -04:00

devtunnels.yml

DevTunnels - Other MS Binary for Data Exfiltration (#327)

2023-10-15 00:05:54 +02:00

Dnx.yml

Removing extra --- from each yaml file

2022-09-10 22:16:47 -04:00

Dotnet.yml

Added fsi to dotnet.exe (#281)

2023-02-25 20:10:45 +00:00

Dsdbutil.yml

Add files via upload

2023-08-23 02:50:03 -04:00

Dump64.yml

Removing extra --- from each yaml file

2022-09-10 22:16:47 -04:00

DumpMinitool.yml

Add Sigma ref

2023-06-10 08:12:12 +02:00

Dxcap.yml

Update Dxcap.yml (#296)

2023-06-27 13:42:47 +01:00

Excel.yml

Removing extra --- from each yaml file

2022-09-10 22:16:47 -04:00

Fsi.yml

Add missing document starts and add yamllint rule (#305)

2023-06-23 20:55:39 +01:00

FsiAnyCpu.yml

Update FsiAnyCpu.yml with Sigma (#225)

2022-12-28 23:50:51 -05:00

Mftrace.yml

Add sigma ref Detection (#272)

2022-12-29 09:51:15 -05:00

Microsoft.NodejsTools.PressAnyKey.yml

Add Sigma ref

2023-06-10 08:12:12 +02:00

Msdeploy.yml

Correcting 'AWL bypass' to 'AWL Bypass'

2022-09-10 22:55:32 -04:00

MsoHtmEd.yml

Add sigma ref Detection (#272)

2022-12-29 09:51:15 -05:00

Mspub.yml

Add sigma ref Detection (#272)

2022-12-29 09:51:15 -05:00

Msxsl.yml

Updated msxsl.yml to include a download and ADS category (#276)

2023-08-05 18:04:09 +01:00

Ntdsutil.yml

Removing extra --- from each yaml file

2022-09-10 22:16:47 -04:00

OpenConsole.yml

Adding and updating various LOLBINS (#229)

2022-11-11 16:42:44 +00:00

Powerpnt.yml

Update Powerpnt.yml with Sigma (#222)

2022-10-04 12:36:49 +01:00

Procdump.yml

Update SigmaHQ ref (#301)

2023-06-19 22:40:24 +01:00

ProtocolHandler.yml

Update ProtocolHandler.yml (#267)

2023-06-17 22:18:06 +01:00

Rcsi.yml

Adding no defualt paths to pass schema validations

2022-09-11 00:16:59 -04:00

Remote.yml

Add sigma ref Detection (#272)

2022-12-29 09:51:15 -05:00

Sqldumper.yml

Removing extra --- from each yaml file

2022-09-10 22:16:47 -04:00

Sqlps.yml

Removing extra --- from each yaml file

2022-09-10 22:16:47 -04:00

Sqltoolsps.yml

Removing extra --- from each yaml file

2022-09-10 22:16:47 -04:00

Squirrel.yml

Update SigmaHQ ref (#301)

2023-06-19 22:40:24 +01:00

Te.yml

Adding no defualt paths to pass schema validations

2022-09-11 00:16:59 -04:00

Teams.yml

removing blank line

2023-09-03 14:49:16 -04:00

Testwindowremoteagent.yml

Renaming vshadow file

2023-10-03 17:38:41 +01:00

Tracker.yml

Adding no defualt paths to pass schema validations

2022-09-11 00:16:59 -04:00

Update.yml

Update SigmaHQ ref (#301)

2023-06-19 22:40:24 +01:00

VisualUiaVerifyNative.yml

Add missing document starts and add yamllint rule (#305)

2023-06-23 20:55:39 +01:00

VSDiagnostics.yml

VSDiagnostics Execute lolbin (#309)

2023-08-05 17:18:48 +01:00

Vshadow.yml

Fixing command attribute on Vshadow

2023-10-03 17:41:18 +01:00

VSIISExeLauncher.yml

Add sigma ref Detection (#272)

2022-12-29 09:51:15 -05:00

Vsjitdebugger.yml

Removing extra --- from each yaml file

2022-09-10 22:16:47 -04:00

vsls-agent.yml

Fix sigmaHQ ref (#300)

2023-06-17 20:29:07 +01:00

Wfc.yml

Update Wfc.yml with Sigma (#223)

2022-12-29 00:22:39 -05:00

Winword.yml

Add sigma ref Detection (#272)

2022-12-29 09:51:15 -05:00

Wsl.yml

Adding and updating various LOLBINS (#229)

2022-11-11 16:42:44 +00:00