 ar13l
|
42db85cc14
|
Cuckoo: raised exceptions detection handling
|
2016-08-25 12:36:01 +03:00 |
|
|
ar13l
|
2998c43f71
|
Cuckoo: Agent presence detection timeout for network operations added
|
2016-08-24 17:14:33 +03:00 |
|
|
ar13l
|
9260563277
|
Cuckoo: WMI OpenProcess flag changed to PROCESS_QUERY_INFORMATION
|
2016-08-24 14:45:58 +03:00 |
|
|
ar13l
|
6db40683e7
|
boost LICENSE added
|
2016-08-24 12:08:06 +03:00 |
|
|
ar13l
|
73c1db7360
|
Cuckoo: Task Scheduler escape implemented (Windows Vista and upper)
|
2016-08-24 12:06:52 +03:00 |
|
|
ar13l
|
0e8abc9037
|
Cuckoo: raised exceptions detection implemented
Cuckoo: WMI escape implemented
Cuckoo: detection by agent.py implemented
Cuckoo: detection based on specific event presence implemented
Cuckoo: whitelisted process detection implemented
Cuckoo: reused pid detection implemented
Cuckoo: configuration artifacts detection implemented
Cuckoo: unbalanced stack detection implemented
Cuckoo: INFINITE delay skip detection implemented
Cuckoo: delays accumulation detection implemented
Cuckoo: functions hooking detection implemented
Cuckoo: agent.py artifacts detection implemented
|
2016-08-22 17:36:28 +03:00 |
|
|
ar13l
|
ecd5593557
|
CHANGELOG added
|
2016-08-22 17:24:04 +03:00 |
|
|
MalwareResearch
|
4d717c553a
|
Initial commit
|
2016-06-10 16:01:05 +03:00 |
|