 Aarush Ahuja
|
2b21df7a9d
|
Merge branch 'master' of github.com:FourCoreLabs/edrRecon into master
v1.3.1
|
2022-02-02 19:05:31 +05:30 |
|
|
Aarush Ahuja
|
03c04cf300
|
fix: use correct crowdstrike key
|
2022-02-02 19:05:22 +05:30 |
|
|
Aarush Ahuja
|
696bd9823c
|
Update README.md
|
2022-01-23 05:11:07 +05:30 |
|
|
Aarush Ahuja
|
a9df2904d3
|
Update README.md
|
2021-12-16 19:38:26 +05:30 |
|
|
Aarush Ahuja
|
d2ee597e4d
|
feat: add elastic endpoint rule (#8)
v1.3
|
2021-12-10 02:59:14 +05:30 |
|
|
Aarush Ahuja
|
6d8f5545da
|
refactor: restructure code into packages (#7)
|
2021-10-14 01:57:45 +05:30 |
|
|
Aarush Ahuja
|
a8be3f24ed
|
fix: add windows build flag in filechecker
|
2021-10-14 00:59:05 +05:30 |
|
|
Aarush Ahuja
|
542bd6c770
|
fix: add os-specific build flags on files
|
2021-10-14 00:52:58 +05:30 |
|
|
Aarush Ahuja
|
7c57031c16
|
fix: return nil in CheckService; remove global var err error (#6)
* fix: return nil err in CheckServices
* fix: remove global var err error
|
2021-10-13 19:43:28 +05:30 |
|
|
Hardik Manocha
|
aae7549f76
|
v1.2
v1.2
|
2021-10-13 19:43:09 +05:30 |
|
|
Hardik Manocha
|
aee3b1efc0
|
updated csc, readme
|
2021-10-13 19:42:46 +05:30 |
|
|
achilles4828
|
9a69d73719
|
Merge pull request #5 from FourCoreLabs/refactor-check-errors
refactor: pass errors via multierror, pass context in CheckRegistry
|
2021-10-13 18:27:46 +05:30 |
|
|
Aarush Ahuja
|
e4fd639102
|
fix: add EDR full form
|
2021-10-12 23:56:08 +05:30 |
|
|
Aarush Ahuja
|
5fd99b5ca6
|
refactor: pass errors via multierror, pass context in CheckRegistry
|
2021-10-12 23:54:38 +05:30 |
|
|
achilles4828
|
89f15641a8
|
Merge pull request #4 from FourCoreLabs/fix-remove-struct
refactor: remove EDRHunt structure; doc: add comments for various functions; move scanners global to pkg/edrRecon
|
2021-10-12 17:44:41 +05:30 |
|
|
Aarush Ahuja
|
f871c7b643
|
refactor: move scanners to pkg/edrRecon
|
2021-10-12 17:39:30 +05:30 |
|
|
Aarush Ahuja
|
41286d73e1
|
doc: add comments; fix: remove edrhunt struct
|
2021-10-12 17:37:12 +05:30 |
|
|
Aarush Ahuja
|
3393818313
|
Update README.md
|
2021-10-11 16:01:15 +05:30 |
|
|
Aarush Ahuja
|
69da0b48c8
|
fix: use len() instead of cap()
|
2021-10-10 16:19:33 +05:30 |
|
|
Aarush Ahuja
|
9eceb7d395
|
fix: update print formatting
v1.1
|
2021-10-09 19:26:38 +05:30 |
|
|
Aarush Ahuja
|
789481133d
|
fix: use empty ldflags with goreleaser for build
|
2021-10-09 19:17:22 +05:30 |
|
|
Aarush Ahuja
|
e80adace78
|
fix: use garble@master with fix for reflect
|
2021-10-09 19:14:33 +05:30 |
|
|
Aarush Ahuja
|
f43d07d672
|
Merge branch 'master' of github.com:FourCoreLabs/edrRecon into master
|
2021-10-08 18:53:43 +05:30 |
|
|
Aarush Ahuja
|
9f8d3a5109
|
fix: update gitignore for EDRHunt.exe
|
2021-10-08 18:51:19 +05:30 |
|
|
Aarush Ahuja
|
6e4389bef6
|
Update README.md
|
2021-10-08 18:49:17 +05:30 |
|
|
Aarush Ahuja
|
ffa0383e1e
|
fix: update app name to EDRHunt
v1.0
|
2021-10-08 18:48:50 +05:30 |
|
|
Aarush Ahuja
|
6220d03366
|
feat: restructure EDRHunt
|
2021-10-06 03:35:20 +05:30 |
|
|
achilles4828
|
32999670bd
|
feat: add more heuristics (#2)
Add heuristics for Cylance, CrowdStrike, McAfee, Symantec
|
2021-10-03 19:53:20 +05:30 |
|
|
Aarush Ahuja
|
ab498dce6c
|
Update README.md
|
2021-10-02 13:35:58 +05:30 |
|
|
Aarush Ahuja
|
888615d56d
|
Update README.md
|
2021-10-02 13:24:17 +05:30 |
|
|
Aarush Ahuja
|
37166694bd
|
Update README.md
|
2021-10-01 20:23:52 +05:30 |
|
|
Aarush Ahuja
|
a50489fb8e
|
fix: update goreleaser and install command in readme
|
2021-09-30 17:12:16 +05:30 |
|
|
Aarush Ahuja
|
629d440399
|
refactor: move main to cmd/edrRecon
|
2021-09-30 17:10:57 +05:30 |
|
|
Aarush Ahuja
|
e1d256d75d
|
feat: restructure source code to better suit go install
|
2021-09-30 17:02:30 +05:30 |
|
|
Aarush Ahuja
|
ba0569bae1
|
fix: remove garble as its breaks program
|
2021-09-30 16:48:44 +05:30 |
|
|
Aarush Ahuja
|
309c960e31
|
fix: don't use -tiny in garble-literals
|
2021-09-30 16:44:44 +05:30 |
|
|
Aarush Ahuja
|
64150c8c0b
|
feat: use garble -tiny and update goreleaser ldflags
|
2021-09-30 16:39:31 +05:30 |
|
|
Aarush Ahuja
|
f139396e2b
|
fix: use sudo to cp garble-literals
|
2021-09-30 16:30:49 +05:30 |
|
|
Aarush AhujaandHardik Manocha
|
bb32dc1797
|
feat: add edr scanner command, edr heuristic and garble in goreleaser (#1)
* optimized output: problem with struct literals
* feat: add scan edr commands and update goreleaser for garble
Co-authored-by: Hardik Manocha <hardikmanocha12345@outlook.com>
|
2021-09-30 16:28:25 +05:30 |
|
|
Hardik Manocha
|
84c75652ac
|
added obf for Registry search
|
2021-09-29 01:21:39 +05:30 |
|
|
Hardik Manocha
|
1bd94738a6
|
added obfuscated EDR Strings
|
2021-09-28 22:22:00 +05:30 |
|
|
Hardik Manocha
|
5bd3070557
|
updated makefile
|
2021-09-27 12:50:42 +05:30 |
|
|
Aarush Ahuja
|
b4ec63def7
|
feat: add workflow status badge in README
|
2021-09-21 14:16:29 +05:30 |
|
|
Hardik Manocha
|
ba5ee16dc4
|
fixed yaml
|
2021-09-21 03:06:49 +05:30 |
|
|
Hardik Manocha
|
c9a3b5ef69
|
beta release vA
|
2021-09-21 03:00:46 +05:30 |
|
|
Hardik Manocha
|
5747b9fbd5
|
removed edrRecon.exe
|
2021-09-21 02:13:25 +05:30 |
|
|
Hardik Manocha
|
ffc2282bcf
|
fixed workflow
|
2021-09-21 02:09:35 +05:30 |
|
|
Hardik Manocha
|
7263d6a88f
|
fixed version
|
2021-09-21 02:04:09 +05:30 |
|
|
Hardik Manocha
|
0498859f4e
|
fixing workflows
|
2021-09-21 02:02:08 +05:30 |
|
|
Hardik Manocha
|
9ee2abe59c
|
fixed workflow
|
2021-09-21 01:59:12 +05:30 |
|