77 Commits
Author SHA1 Message Date
Aarush Ahuja 4e1f5c8765 feat: add cortex xdr (#17) v1.6.0 2025-12-10 16:14:10 +05:30
arush15june 3402394469 fix: update goreleaser v1.5.2 2025-07-03 17:16:30 +05:30
arush15june 3c49cb6caa fix: remove garble from release 2025-07-03 17:09:24 +05:30
arush15june 0e2a3915d6 fix: add harfanglab in EDRList v1.5.1 2025-07-03 17:07:17 +05:30
johnsherchan90andAarush Ahuja e574169768 update: added harfanglab in scanner (#16)
* update: added harfanglab in scanner

* Update scan_harfanglab.go

---------

Co-authored-by: Aarush Ahuja <ahujaarush@gmail.com>
v1.5.0
2025-05-12 19:35:38 +05:30
achilles4828 da2b0c6f61 Disabled Registry Check Functionality v1.4.8 2023-09-14 10:14:46 +05:30
arush15june b71a13507d fix: update package v1.4.7 2023-05-11 00:32:53 +05:30
arush15june d84148336f fix: update go mod v1.4.6 2023-05-11 00:25:16 +05:30
achilles4828 4644e4ee07 Update scan_eset.go (#15) v1.4.5 2023-01-24 01:13:52 +05:30
achilles4828 22ec3374e4 updated and removed generic signatures (#14) v1.4.4 2022-11-04 14:23:02 +05:30
Aarush Ahuja 65507a7f6a fix: update Go to 1.19 v1.4.3 2022-10-14 21:44:34 +05:30
Aarush Ahuja 8ef2a72985 fix: update limacharlie detection to use rphcp (#12) 2022-10-14 21:41:14 +05:30
achilles4828 e36956da3b Merge pull request #11 from FourCoreLabs/feat-limacharlie
feat: add limacharlie edr scan
2022-09-22 22:31:11 +05:30
achilles4828 c0600ae392 Update README.md 2022-09-22 22:30:51 +05:30
Aarush Ahuja 66c637aabe feat: add limacharlie edr scan 2022-09-20 14:18:06 +05:30
Hardik Manocha e06624ee87 updated main v1.4.2 2022-08-23 01:32:42 +05:30
Hardik Manocha 9671cb0aec Updated elsastic 2022-08-23 00:09:45 +05:30
Hardik Manocha 5004988fbb updated fortinet signatures v1.4.1 2022-08-22 15:58:44 +05:30
achilles4828 763a84e1ef Merge pull request #10 from FourCoreLabs/new-edrs
Added new edr signatures and updated old signatures
2022-08-22 15:53:05 +05:30
Hardik Manocha 63b58771b4 Added new edr signatures and updated old signatures 2022-08-22 15:51:51 +05:30
achilles4828 28770e4e0f Merge pull request #9 from FourCoreLabs/qualys-trend
Added WMI AV Support
v1.4.0
2022-08-17 03:19:03 +05:30
Hardik Manocha 19a27b522f Added WMI AV Support 2022-08-17 03:12:14 +05:30
Aarush Ahuja 1acbce9f15 fix: use go 1.18 v1.3.4 2022-04-06 20:49:23 +05:30
Aarush Ahuja 41de5cbbdd refactor: use update domain v1.3.3 2022-04-06 20:30:45 +05:30
Aarush Ahuja 70a1016d41 refactor: update fourcore domain 2022-04-06 20:28:57 +05:30
Aarush Ahuja 35fd0fba11 fix: use latest fork of wmi v1.3.2 2022-02-27 17:46:45 +05:30
Aarush Ahuja 2b21df7a9d Merge branch 'master' of github.com:FourCoreLabs/edrRecon into master v1.3.1 2022-02-02 19:05:31 +05:30
Aarush Ahuja 03c04cf300 fix: use correct crowdstrike key 2022-02-02 19:05:22 +05:30
Aarush Ahuja 696bd9823c Update README.md 2022-01-23 05:11:07 +05:30
Aarush Ahuja a9df2904d3 Update README.md 2021-12-16 19:38:26 +05:30
Aarush Ahuja d2ee597e4d feat: add elastic endpoint rule (#8) v1.3 2021-12-10 02:59:14 +05:30
Aarush Ahuja 6d8f5545da refactor: restructure code into packages (#7) 2021-10-14 01:57:45 +05:30
Aarush Ahuja a8be3f24ed fix: add windows build flag in filechecker 2021-10-14 00:59:05 +05:30
Aarush Ahuja 542bd6c770 fix: add os-specific build flags on files 2021-10-14 00:52:58 +05:30
Aarush Ahuja 7c57031c16 fix: return nil in CheckService; remove global var err error (#6)
* fix: return nil err in CheckServices

* fix: remove global var err error
2021-10-13 19:43:28 +05:30
Hardik Manocha aae7549f76 v1.2 v1.2 2021-10-13 19:43:09 +05:30
Hardik Manocha aee3b1efc0 updated csc, readme 2021-10-13 19:42:46 +05:30
achilles4828 9a69d73719 Merge pull request #5 from FourCoreLabs/refactor-check-errors
refactor: pass errors via multierror, pass context in CheckRegistry
2021-10-13 18:27:46 +05:30
Aarush Ahuja e4fd639102 fix: add EDR full form 2021-10-12 23:56:08 +05:30
Aarush Ahuja 5fd99b5ca6 refactor: pass errors via multierror, pass context in CheckRegistry 2021-10-12 23:54:38 +05:30
achilles4828 89f15641a8 Merge pull request #4 from FourCoreLabs/fix-remove-struct
refactor: remove EDRHunt structure; doc: add comments for various functions; move scanners global to pkg/edrRecon
2021-10-12 17:44:41 +05:30
Aarush Ahuja f871c7b643 refactor: move scanners to pkg/edrRecon 2021-10-12 17:39:30 +05:30
Aarush Ahuja 41286d73e1 doc: add comments; fix: remove edrhunt struct 2021-10-12 17:37:12 +05:30
Aarush Ahuja 3393818313 Update README.md 2021-10-11 16:01:15 +05:30
Aarush Ahuja 69da0b48c8 fix: use len() instead of cap() 2021-10-10 16:19:33 +05:30
Aarush Ahuja 9eceb7d395 fix: update print formatting v1.1 2021-10-09 19:26:38 +05:30
Aarush Ahuja 789481133d fix: use empty ldflags with goreleaser for build 2021-10-09 19:17:22 +05:30
Aarush Ahuja e80adace78 fix: use garble@master with fix for reflect 2021-10-09 19:14:33 +05:30
Aarush Ahuja f43d07d672 Merge branch 'master' of github.com:FourCoreLabs/edrRecon into master 2021-10-08 18:53:43 +05:30
Aarush Ahuja 9f8d3a5109 fix: update gitignore for EDRHunt.exe 2021-10-08 18:51:19 +05:30