onatuzunyayla c65c9545f5 Create testwindowremoteagent.yaml ...

This one is pretty straightforward and related to the vstest so pushed the commit for this pull request. TestWindowRemoteAgent.exe is a signed DLL that can be utilized to be a gadget for data exfiltration since it tries connection to any host.

2023-08-25 15:49:14 +03:00

..

AccCheckConsole.yml

Add sigma ref Detection (#272)

2022-12-29 09:51:15 -05:00

Adplus.yml

Several LOLBINs additions & modifications (#192)

2023-03-31 13:46:21 +01:00

Agentexecutor.yml

Add sigma ref Detection (#272)

2022-12-29 09:51:15 -05:00

Appvlp.yml

Removing extra --- from each yaml file

2022-09-10 22:16:47 -04:00

Bginfo.yml

Removing extra --- from each yaml file

2022-09-10 22:16:47 -04:00

Cdb.yml

Several LOLBINs additions & modifications (#192)

2023-03-31 13:46:21 +01:00

Coregen.yml

Add Sigma ref

2023-06-10 08:12:12 +02:00

Createdump.yml

Several LOLBINs additions & modifications (#192)

2023-03-31 13:46:21 +01:00

Csi.yml

Removing extra --- from each yaml file

2022-09-10 22:16:47 -04:00

DefaultPack.yml

Add Sigma ref

2023-06-10 08:12:12 +02:00

Devinit.yml

Add Sigma ref

2023-06-10 08:12:12 +02:00

Devtoolslauncher.yml

Removing extra --- from each yaml file

2022-09-10 22:16:47 -04:00

Dnx.yml

Removing extra --- from each yaml file

2022-09-10 22:16:47 -04:00

Dotnet.yml

Added fsi to dotnet.exe (#281)

2023-02-25 20:10:45 +00:00

Dump64.yml

Removing extra --- from each yaml file

2022-09-10 22:16:47 -04:00

DumpMinitool.yml

Add Sigma ref

2023-06-10 08:12:12 +02:00

Dxcap.yml

Update Dxcap.yml (#296)

2023-06-27 13:42:47 +01:00

Excel.yml

Removing extra --- from each yaml file

2022-09-10 22:16:47 -04:00

Fsi.yml

Add missing document starts and add yamllint rule (#305)

2023-06-23 20:55:39 +01:00

FsiAnyCpu.yml

Update FsiAnyCpu.yml with Sigma (#225)

2022-12-28 23:50:51 -05:00

Mftrace.yml

Add sigma ref Detection (#272)

2022-12-29 09:51:15 -05:00

Microsoft.NodejsTools.PressAnyKey.yml

Add Sigma ref

2023-06-10 08:12:12 +02:00

Msdeploy.yml

Correcting 'AWL bypass' to 'AWL Bypass'

2022-09-10 22:55:32 -04:00

MsoHtmEd.yml

Add sigma ref Detection (#272)

2022-12-29 09:51:15 -05:00

Mspub.yml

Add sigma ref Detection (#272)

2022-12-29 09:51:15 -05:00

Msxsl.yml

Updated msxsl.yml to include a download and ADS category (#276)

2023-08-05 18:04:09 +01:00

Ntdsutil.yml

Removing extra --- from each yaml file

2022-09-10 22:16:47 -04:00

OpenConsole.yml

Adding and updating various LOLBINS (#229)

2022-11-11 16:42:44 +00:00

Powerpnt.yml

Update Powerpnt.yml with Sigma (#222)

2022-10-04 12:36:49 +01:00

Procdump.yml

Update SigmaHQ ref (#301)

2023-06-19 22:40:24 +01:00

ProtocolHandler.yml

Update ProtocolHandler.yml (#267)

2023-06-17 22:18:06 +01:00

Rcsi.yml

Adding no defualt paths to pass schema validations

2022-09-11 00:16:59 -04:00

Remote.yml

Add sigma ref Detection (#272)

2022-12-29 09:51:15 -05:00

Sqldumper.yml

Removing extra --- from each yaml file

2022-09-10 22:16:47 -04:00

Sqlps.yml

Removing extra --- from each yaml file

2022-09-10 22:16:47 -04:00

Sqltoolsps.yml

Removing extra --- from each yaml file

2022-09-10 22:16:47 -04:00

Squirrel.yml

Update SigmaHQ ref (#301)

2023-06-19 22:40:24 +01:00

Te.yml

Adding no defualt paths to pass schema validations

2022-09-11 00:16:59 -04:00

testwindowremoteagent.yaml

Create testwindowremoteagent.yaml

2023-08-25 15:49:14 +03:00

Tracker.yml

Adding no defualt paths to pass schema validations

2022-09-11 00:16:59 -04:00

Update.yml

Update SigmaHQ ref (#301)

2023-06-19 22:40:24 +01:00

VisualUiaVerifyNative.yml

Add missing document starts and add yamllint rule (#305)

2023-06-23 20:55:39 +01:00

VSDiagnostics.yml

VSDiagnostics Execute lolbin (#309)

2023-08-05 17:18:48 +01:00

VSIISExeLauncher.yml

Add sigma ref Detection (#272)

2022-12-29 09:51:15 -05:00

Vsjitdebugger.yml

Removing extra --- from each yaml file

2022-09-10 22:16:47 -04:00

vsls-agent.yml

Fix sigmaHQ ref (#300)

2023-06-17 20:29:07 +01:00

Wfc.yml

Update Wfc.yml with Sigma (#223)

2022-12-29 00:22:39 -05:00

Winword.yml

Add sigma ref Detection (#272)

2022-12-29 09:51:15 -05:00

Wsl.yml

Adding and updating various LOLBINS (#229)

2022-11-11 16:42:44 +00:00