14 Commits

Author SHA1 Message Date
chkp-alexeybu f6a9ebceef Added flexible build configurations to enable running without command line
Removed configuration file for the HTML report template
Scripts migrated to Python 3
2022-04-05 11:59:40 +03:00
chkp-yaroslavh 3f4295bb1b Generic: AudioDeviceAbsence has been added - checks if an audio device is attached to the PC 2019-11-14 16:06:28 +03:00
Alexander Chailytko 1f5d6f16c3 Added link to video recording from ShmooCon 2017 2018-10-03 12:28:43 +03:00
Alexey Bukhteyev 3e4e5a36f6 Vbox: added virtual devices to be checked as means of detection
Vbox: added MAC address to be checked as means of detection
VMware: added file names to be checked as means of detection
VMware: added registry paths and values to be checked as means of detection
VMware: added running processes to be checked as means of detection
BOCHS: implementation of detection techniques using VEDetection interface
Hyper-V: implementation of detection techniques using VEDetection interface
JoeBox: implementation of detection techniques using VEDetection interface
Parallels: implementation of detection techniques using VEDetection interface
QEMU: implementation of detection techniques using VEDetection interface
Sandboxie: implementation of detection techniques using VEDetection interface
VirtualPC: implementation of detection techniques using VEDetection interface
Wine: implementation of detection techniques using VEDetection interface
Xen: implementation of detection techniques using VEDetection interface
Miscellaneous sandboxes: implementation of detection techniques using VEDetection interface
Added config for BOCHS evasions: checking registry
Added config for Hyper-V evasions: checking registry, global objects in OS
Added config for JoeBox evasions: checking registry, running processes
Added config for Parallels evasions: checking filesystem, registry, firmware tables, running processes, global objects in OS
Added config for QEMU evasions: checking registry, disk name
Added config for Sandboxie evasions: checking registry, global objects in OS
Added config for VirtualPC evasions: checking registry, firmware tables, disk name, running processes, global devices in OS
Added config for Wine evasions: checking registry
Added config for Xen evasions: checking registry, running processes
Added config for miscellaneous VM and sandboxes evasions
Generic: fixed bug in raw mouse activity check
gitignore: updated
2018-04-09 17:45:02 +03:00
MalwareResearch dcec8b7d1a Adding ShmooCon 2017 to presentations list 2017-01-18 15:08:23 +03:00
ar13l 774b5cc6dd New slides added 2017-01-18 14:56:55 +03:00
MalwareResearch da906a1e90 Adjusted repository name, links and credits 2017-01-11 16:29:28 +03:00
MalwareResearch 50ba964057 Update README.md 2017-01-04 17:21:20 +03:00
MalwareResearch 381d2ea96d Update README.md 2016-10-13 15:40:01 +03:00
MalwareResearch e2f809661f Slides from Virus Bulletin 2016 conference link added 2016-10-10 14:37:05 +03:00
MalwareResearch 96b973326f Update README.md 2016-10-06 09:21:31 -06:00
MalwareResearch bcbce3f150 Update README.md 2016-10-05 23:44:09 +03:00
MalwareResearch 21627d2401 Update README.md 2016-10-05 23:29:22 +03:00
MalwareResearch 4d717c553a Initial commit 2016-06-10 16:01:05 +03:00