public-mirrors/LOLBAS
1
0
Fork 0
mirror of https://github.com/LOLBAS-Project/LOLBAS synced 2025-03-13 10:58:50 +01:00
Code Issues Projects Releases Wiki Activity
LOLBAS/yml/OSBinaries
History
Manas Bellani d6e4fb07d5
Added lolbas iediagcmd.exe as discovered by Adam @hexacorn (#199) 
Everything looks good, confirmed working on Windows 10 & 11, merging changes:

* Added 'Execute' lolbas for iediagcmd.exe

* Added missing fields from the template

* Update Iediagcmd.yml

Made corrections

* Update Iediagcmd.yml

Removing trailing spaces

* Update Iediagcmd.yml

removing empty fields

* Minor changes

* Update Iediagcmd.yml

Removing space before first "&". When setting the Environment variable, it's picking up the space so the path seemed to be "c:\test \", which is why tests are failing.

* Adding Windows 11 support

---------

Co-authored-by: Conor Richard <xenos@xenos-1.net>
Co-authored-by: Wietze <wietze@users.noreply.github.com>
2023-10-04 09:47:18 -04:00
..
AppInstaller.yml
Merge remote-tracking branch 'upstream/master' into windows_11_sprint
2022-10-03 16:18:57 +01:00
Aspnet_Compiler.yml
Merge remote-tracking branch 'upstream/master' into windows_11_sprint
2022-10-03 16:18:57 +01:00
At.yml
Remove unnecessary "at" on command (#286)
2023-05-01 23:36:38 +01:00
Atbroker.yml
Merge remote-tracking branch 'upstream/master' into windows_11_sprint
2022-10-03 16:18:57 +01:00
Bash.yml
Removing extra --- from each yaml file
2022-09-10 22:16:47 -04:00
Bitsadmin.yml
Merge remote-tracking branch 'upstream/master' into windows_11_sprint
2022-10-03 16:18:57 +01:00
Certoc.yml
Removing extra --- from each yaml file
2022-09-10 22:16:47 -04:00
Certreq.yml
Removing pre-Windows 10 OSs from CertReq entry, fixes #247
2023-02-25 19:19:22 +00:00
Certutil.yml
Update SigmaHQ ref (#301)
2023-06-19 22:40:24 +01:00
Cmd.yml
Adding WebDav techniques to cmd.exe entry (#273)
2023-03-08 14:39:32 +00:00
Cmdkey.yml
Merge remote-tracking branch 'upstream/master' into windows_11_sprint
2022-10-03 16:18:57 +01:00
Cmdl32.yml
Update Cmdl32.exe resource links (#317)
2023-08-04 11:21:36 +01:00
Cmstp.yml
Merge remote-tracking branch 'upstream/master' into windows_11_sprint
2022-10-03 16:18:57 +01:00
Colorcpl.yml
Added colorcpl.exe (#315)
2023-07-27 18:18:49 +01:00
ConfigSecurityPolicy.yml
Merge branch 'master' into windows_11_sprint
2022-10-04 12:31:31 +01:00
Conhost.yml
Add vsls-agent lolbin and committing a few other changes (#263)
2023-02-25 18:47:44 +00:00
Control.yml
Merge remote-tracking branch 'upstream/master' into windows_11_sprint
2022-10-03 16:18:57 +01:00
Csc.yml
Merge remote-tracking branch 'upstream/master' into windows_11_sprint
2022-10-03 16:18:57 +01:00
Cscript.yml
Update SigmaHQ ref (#301)
2023-06-19 22:40:24 +01:00
CustomShellHost.yml
Add Sigma rule references to various LOLBAS (#260)
2022-10-26 09:10:39 +01:00
DataSvcUtil.yml
Merge remote-tracking branch 'upstream/master' into windows_11_sprint
2022-10-03 16:18:57 +01:00
Desktopimgdownldr.yml
Merge remote-tracking branch 'upstream/master' into windows_11_sprint
2022-10-03 16:18:57 +01:00
DeviceCredentialDeployment.yml
Add Sigma rule references to various LOLBAS (#260)
2022-10-26 09:10:39 +01:00
Dfsvc.yml
Merge remote-tracking branch 'upstream/master' into windows_11_sprint
2022-10-03 16:18:57 +01:00
Diantz.yml
Removing extra --- from each yaml file
2022-09-10 22:16:47 -04:00
Diskshadow.yml
Fixing errors found in yaml lint action.
2022-09-11 01:07:18 -04:00
Dnscmd.yml
Fixing errors found in yaml lint action.
2022-09-11 01:07:18 -04:00
Esentutl.yml
Update SigmaHQ ref (#301)
2023-06-19 22:40:24 +01:00
Eventvwr.yml
Add vsls-agent lolbin and committing a few other changes (#263)
2023-02-25 18:47:44 +00:00
Expand.yml
Merge remote-tracking branch 'upstream/master' into windows_11_sprint
2022-10-03 16:18:57 +01:00
Explorer.yml
Several LOLBINs additions & modifications (#192)
2023-03-31 13:46:21 +01:00
Extexport.yml
Merge remote-tracking branch 'upstream/master' into windows_11_sprint
2022-10-03 16:18:57 +01:00
Extrac32.yml
Merge remote-tracking branch 'upstream/master' into windows_11_sprint
2022-10-03 16:18:57 +01:00
Findstr.yml
Merge remote-tracking branch 'upstream/master' into windows_11_sprint
2022-10-03 16:18:57 +01:00
Finger.yml
Fixing file formating.
2022-09-11 01:33:36 -04:00
FltMC.yml
Merge branch 'master' into windows_11_sprint
2022-10-04 15:45:57 +01:00
Forfiles.yml
Update SigmaHQ ref (#301)
2023-06-19 22:40:24 +01:00
fsutil.yml
Add Sigma rule references to various LOLBAS (#260)
2022-10-26 09:10:39 +01:00
Ftp.yml
Merge remote-tracking branch 'upstream/master' into windows_11_sprint
2022-10-03 16:18:57 +01:00
Gpscript.yml
Merge remote-tracking branch 'upstream/master' into windows_11_sprint
2022-10-03 16:18:57 +01:00
Hh.yml
Merge remote-tracking branch 'upstream/master' into windows_11_sprint
2022-10-03 16:18:57 +01:00
Ie4uinit.yml
Merge remote-tracking branch 'upstream/master' into windows_11_sprint
2022-10-03 16:18:57 +01:00
Iediagcmd.yml
Added lolbas iediagcmd.exe as discovered by Adam @hexacorn (#199)
2023-10-04 09:47:18 -04:00
Ieexec.yml
Update SigmaHQ ref (#301)
2023-06-19 22:40:24 +01:00
Ilasm.yml
Merge remote-tracking branch 'upstream/master' into windows_11_sprint
2022-10-03 16:18:57 +01:00
IMEWDBLD.yml
Merge remote-tracking branch 'upstream/master' into windows_11_sprint
2022-10-03 16:18:57 +01:00
Infdefaultinstall.yml
Merge remote-tracking branch 'upstream/master' into windows_11_sprint
2022-10-03 16:18:57 +01:00
Installutil.yml
Update SigmaHQ ref (#301)
2023-06-19 22:40:24 +01:00
Jsc.yml
Merge remote-tracking branch 'upstream/master' into windows_11_sprint
2022-10-03 16:18:57 +01:00
Ldifde.yml
Add sigma and remove ampty string (#297)
2023-06-17 20:30:00 +01:00
Makecab.yml
Merge remote-tracking branch 'upstream/master' into windows_11_sprint
2022-10-03 16:18:57 +01:00
Mavinject.yml
Update SigmaHQ ref (#301)
2023-06-19 22:40:24 +01:00
Microsoft.Workflow.Compiler.yml
Merge remote-tracking branch 'upstream/master' into windows_11_sprint
2022-10-03 16:18:57 +01:00
Mmc.yml
Merge remote-tracking branch 'upstream/master' into windows_11_sprint
2022-10-03 16:18:57 +01:00
MpCmdRun.yml
Merge remote-tracking branch 'upstream/master' into windows_11_sprint
2022-10-03 16:18:57 +01:00
Msbuild.yml
Update SigmaHQ ref (#301)
2023-06-19 22:40:24 +01:00
Msconfig.yml
Removing extra --- from each yaml file
2022-09-10 22:16:47 -04:00
Msdt.yml
Adding and updating various LOLBINS (#229)
2022-11-11 16:42:44 +00:00
msedge_proxy.yml
Update msedge_proxy.yml
2023-09-05 18:47:05 +03:00
Msedge.yml
Merge pull request #295 from frack113/sigma_20230610
2023-06-11 22:10:04 -04:00
msedgewebview2.yml
Create msedgewebview2.exe (#299)
2023-06-17 21:56:16 +01:00
Mshta.yml
Update SigmaHQ ref (#301)
2023-06-19 22:40:24 +01:00
Msiexec.yml
Merge remote-tracking branch 'upstream/master' into windows_11_sprint
2022-10-03 16:18:57 +01:00
Netsh.yml
Merge remote-tracking branch 'upstream/master' into windows_11_sprint
2022-10-03 16:18:57 +01:00
Odbcconf.yml
Update SigmaHQ ref (#301)
2023-06-19 22:40:24 +01:00
OfflineScannerShell.yml
Merge remote-tracking branch 'upstream/master' into windows_11_sprint
2022-10-03 16:18:57 +01:00
OneDriveStandaloneUpdater.yml
Add Sigma rule references to various LOLBAS (#260)
2022-10-26 09:10:39 +01:00
Pcalua.yml
Update SigmaHQ ref (#301)
2023-06-19 22:40:24 +01:00
Pcwrun.yml
Adding and updating various LOLBINS (#229)
2022-11-11 16:42:44 +00:00
Pktmon.yml
Merge remote-tracking branch 'upstream/master' into windows_11_sprint
2022-10-03 16:18:57 +01:00
Pnputil.yml
Merge remote-tracking branch 'upstream/master' into windows_11_sprint
2022-10-03 16:18:57 +01:00
Presentationhost.yml
Update SigmaHQ ref (#301)
2023-06-19 22:40:24 +01:00
Print.yml
Merge remote-tracking branch 'upstream/master' into windows_11_sprint
2022-10-03 16:18:57 +01:00
PrintBrm.yml
Merge remote-tracking branch 'upstream/master' into windows_11_sprint
2022-10-03 16:18:57 +01:00
Provlaunch.yml
Add SigmaHQ ref
2023-09-03 15:06:34 +02:00
Psr.yml
Removing extra --- from each yaml file
2022-09-10 22:16:47 -04:00
Rasautou.yml
Removing extra --- from each yaml file
2022-09-10 22:16:47 -04:00
Rdrleakdiag.yml
Update SigmaHQ ref (#301)
2023-06-19 22:40:24 +01:00
Reg.yml
Merge remote-tracking branch 'upstream/master' into windows_11_sprint
2022-10-03 16:18:57 +01:00
Regasm.yml
Update SigmaHQ ref (#301)
2023-06-19 22:40:24 +01:00
Regedit.yml
Merge remote-tracking branch 'upstream/master' into windows_11_sprint
2022-10-03 16:18:57 +01:00
Regini.yml
Merge remote-tracking branch 'upstream/master' into windows_11_sprint
2022-10-03 16:18:57 +01:00
Register-cimprovider.yml
Merge remote-tracking branch 'upstream/master' into windows_11_sprint
2022-10-03 16:18:57 +01:00
Regsvcs.yml
Update SigmaHQ ref (#301)
2023-06-19 22:40:24 +01:00
Regsvr32.yml
Update SigmaHQ ref (#301)
2023-06-19 22:40:24 +01:00
Replace.yml
Merge remote-tracking branch 'upstream/master' into windows_11_sprint
2022-10-03 16:18:57 +01:00
Rpcping.yml
Merge remote-tracking branch 'upstream/master' into windows_11_sprint
2022-10-03 16:18:57 +01:00
Rundll32.yml
Merge remote-tracking branch 'upstream/master' into windows_11_sprint
2022-10-03 16:18:57 +01:00
Runexehelper.yml
Add sigma ref Detection (#272)
2022-12-29 09:51:15 -05:00
Runonce.yml
Merge remote-tracking branch 'upstream/master' into windows_11_sprint
2022-10-03 16:18:57 +01:00
Runscripthelper.yml
Fixing errors found in yaml lint action.
2022-09-11 01:07:18 -04:00
Sc.yml
Update SigmaHQ ref (#301)
2023-06-19 22:40:24 +01:00
Schtasks.yml
Merge remote-tracking branch 'upstream/master' into windows_11_sprint
2022-10-03 16:18:57 +01:00
Scriptrunner.yml
Merge remote-tracking branch 'upstream/master' into windows_11_sprint
2022-10-03 16:18:57 +01:00
Setres.yml
Add sigma ref Detection (#272)
2022-12-29 09:51:15 -05:00
SettingSyncHost.yml
Merge remote-tracking branch 'upstream/master' into windows_11_sprint
2022-10-03 16:18:57 +01:00
Ssh.yml
Add missing document starts and add yamllint rule (#305)
2023-06-23 20:55:39 +01:00
Stordiag.yml
Merge remote-tracking branch 'upstream/master' into windows_11_sprint
2022-10-03 16:18:57 +01:00
Syncappvpublishingserver.yml
Update SigmaHQ ref (#301)
2023-06-19 22:40:24 +01:00
Tar.yml
Tar.exe lateral movement (#277)
2023-06-17 22:25:34 +01:00
Teams.yml
Added Sigma to Teams.exe (#329)
2023-10-03 12:04:39 +01:00
Ttdinject.yml
Merge remote-tracking branch 'upstream/master' into windows_11_sprint
2022-10-03 16:18:57 +01:00
Tttracer.yml
Merge remote-tracking branch 'upstream/master' into windows_11_sprint
2022-10-03 16:18:57 +01:00
Unregmp2.yml
Add sigma ref Detection (#272)
2022-12-29 09:51:15 -05:00
Vbc.yml
Merge remote-tracking branch 'upstream/master' into windows_11_sprint
2022-10-03 16:18:57 +01:00
Verclsid.yml
Merge remote-tracking branch 'upstream/master' into windows_11_sprint
2022-10-03 16:18:57 +01:00
Wab.yml
Merge remote-tracking branch 'upstream/master' into windows_11_sprint
2022-10-03 16:18:57 +01:00
Winget.yml
Adding Windows Package Manager tool winget.exe (#188)
2022-10-04 11:27:47 +01:00
Wlrmdr.yml
Removing extra --- from each yaml file
2022-09-10 22:16:47 -04:00
Wmic.yml
Merge remote-tracking branch 'upstream/master' into windows_11_sprint
2022-10-03 16:18:57 +01:00
WorkFolders.yml
Merge remote-tracking branch 'upstream/master' into windows_11_sprint
2022-10-03 16:18:57 +01:00
Wscript.yml
Update SigmaHQ ref (#301)
2023-06-19 22:40:24 +01:00
Wsreset.yml
Update SigmaHQ ref (#301)
2023-06-19 22:40:24 +01:00
wt.yml
Adding and updating various LOLBINS (#229)
2022-11-11 16:42:44 +00:00
Wuauclt.yml
Fixing errors found in yaml lint action.
2022-09-11 01:07:18 -04:00
Xwizard.yml
Merge remote-tracking branch 'upstream/master' into windows_11_sprint
2022-10-03 16:18:57 +01:00