Commit Graph

  • b50df49ac2 Added colorcpl.exe (#315) Wietze 2023-07-27 18:18:49 +01:00
  • 7241a8b7fd Create Provlaunch.yml (#307) Grzegorz Tworek 2023-07-25 17:16:39 +02:00
  • 4453bb1ec4 Add Code.yml (honorable mention) (#278) pfiatde 2023-07-18 01:13:04 +02:00
  • b3d11316d4 working script add_too_check_detection_urls josehelps 2023-07-10 10:47:02 -04:00
  • fa3f6bbc0c Update Dxcap.yml (#296) Vikas Singh 2023-06-27 18:12:47 +05:30
  • 62ed936a39 Add missing document starts and add yamllint rule (#305) Ryan Plas 2023-06-23 15:55:39 -04:00
  • e8ea28d4e9 Update SigmaHQ ref (#301) frack113 2023-06-19 23:40:24 +02:00
  • c3f2690633 Tar.exe lateral movement (#277) CyberSorcery 2023-06-17 16:25:34 -05:00
  • 8aca00a56b Update ProtocolHandler.yml (#267) C-h4ck-0 2023-06-18 00:18:06 +03:00
  • d71415de77 Create msedgewebview2.exe (#299) Black Shade 2023-06-17 23:56:16 +03:00
  • b52200eb89 Add sigma and remove ampty string (#297) frack113 2023-06-17 21:30:00 +02:00
  • e08b10f437 Fix sigmaHQ ref (#300) frack113 2023-06-17 21:29:07 +02:00
  • f5a3812c91 Merge pull request #295 from frack113/sigma_20230610 Jose Enrique Hernandez 2023-06-11 22:10:04 -04:00
  • ffc8c394dc Merge pull request #291 from mrd0x/electron Jose Enrique Hernandez 2023-06-11 22:08:51 -04:00
  • 55b7556b64 Add Sigma ref frack113 2023-06-10 08:12:12 +02:00
  • 3eb7625da4 Update Dsdbutil.yml Ekitji 2023-06-08 01:07:25 +03:00
  • 1a3ada3984 Update Dsdbutil.yml Ekitji 2023-06-08 01:02:51 +03:00
  • 3556f254b2 dsdbutil.exe Ekitji 2023-05-31 16:52:51 +02:00
  • ef8048344d Update msedge.exe & add teams.exe mr.d0x 2023-05-27 12:11:05 -04:00
  • 1f7e8a3e57 Remove unnecessary "at" on command (#286) biscoito 2023-05-01 19:36:38 -03:00
  • 787c87470e Several LOLBINs additions & modifications (#192) mrd0x 2023-03-31 08:46:21 -04:00
  • a9046ecb85 Fixing newline in odbcconf entry Wietze 2023-03-25 16:21:34 +00:00
  • 06f33c91ae Updating odbcconf, fixes #282 - thanks @hexacorn (#283) Wietze 2023-03-25 16:14:04 +00:00
  • 2b7fdcac03 Adding WebDav techniques to cmd.exe entry (#273) Mr. 0range 2023-03-08 06:39:32 -08:00
  • 8283b4b7e3 Added fsi to dotnet.exe (#281) YamAlon 2023-02-25 22:10:45 +02:00
  • 74d010a893 Removing pre-Windows 10 OSs from CertReq entry, fixes #247 Wietze 2023-02-25 19:19:22 +00:00
  • cb51760ace Adding badges to README (#256) Jose Enrique Hernandez 2023-02-25 13:56:00 -05:00
  • cd16f0aff3 Add vsls-agent lolbin and committing a few other changes (#263) bohops 2023-02-25 13:47:44 -05:00
  • ded90467a8 Create Ssh.yml (#211) febou92 2022-12-29 19:45:09 -05:00
  • 1072d3dc34 Add sigma ref Detection (#272) frack113 2022-12-29 15:51:15 +01:00
  • 8ff159abb7 Update Wfc.yml with Sigma (#223) securepeacock 2022-12-29 00:22:39 -05:00
  • 41f5d6f33b Update VisualUiaVerifyNative.yml with Sigma (#224) securepeacock 2022-12-29 00:15:31 -05:00
  • 1833ddd391 Update FsiAnyCpu.yml with Sigma (#225) securepeacock 2022-12-28 23:50:51 -05:00
  • 8d35738a1f Update Fsi.yml with Sigma (#226) securepeacock 2022-12-28 23:41:27 -05:00
  • c19a2e3cf8 Update Remote.yml with Sigma (#227) securepeacock 2022-12-28 21:24:57 -05:00
  • ec676cbd93 Create Runexehelper.yml (#269) Grzegorz Tworek 2022-12-17 18:30:30 +01:00
  • 8452c1ca96 Update eventvwr.yml with Execute part (#252) Michał Kucharski 2022-11-13 20:56:32 +01:00
  • 0d7efb8ead Adding and updating various LOLBINS (#229) Nasreddine Bencherchali 2022-11-11 17:42:44 +01:00
  • 1587eeaf6c Create Setres.yml (#262) Grzegorz Tworek 2022-10-26 12:15:13 +02:00
  • c20f388444 Fixing minor error in description of Explorer, closes #257 Wietze 2022-10-26 09:14:27 +01:00
  • 01d7580886 Add Sigma rule references to various LOLBAS (#260) frack113 2022-10-26 10:10:39 +02:00
  • 5449be3e95 Merge pull request #186 from wietze/windows_11_sprint Jose Enrique Hernandez 2022-10-25 13:15:03 -04:00
  • a0556744d1 Merge branch 'master' into windows_11_sprint Wietze 2022-10-04 15:45:57 +01:00
  • 6f2135e173 Updating category of fltMC to tamper Wietze 2022-10-04 15:37:56 +01:00
  • 4217d0f8ca Adding .NET Core binary createdump.exe (#240) Daniel Santos 2022-10-04 07:23:10 -05:00
  • 461fbaf787 Update Powerpnt.yml with Sigma (#222) securepeacock 2022-10-04 07:36:49 -04:00
  • 76acca6f2b Merge branch 'master' into windows_11_sprint Wietze 2022-10-04 12:31:31 +01:00
  • f29471dde9 Adding download functionality entries to existing binaries (#239) C-h4ck-0 2022-10-04 18:27:31 +07:00
  • ea68ad824d Adding 3 Microsoft Office-based downloaders (#238) C-h4ck-0 2022-10-04 18:13:56 +07:00
  • 143a6639f8 Adding .gitattributes file, fixing template/checks (#253) Conor Richard 2022-10-04 06:50:59 -04:00
  • 83ca9aa197 Adding Windows Package Manager tool winget.exe (#188) saulpanders 2022-10-04 06:27:47 -04:00
  • 67e1040172 Merge remote-tracking branch 'upstream/master' into windows_11_sprint Wietze 2022-10-03 16:16:30 +01:00
  • da38f3d8ed Merge pull request #185 from whickey-r7/patch-1 Conor Richard 2022-09-17 21:38:59 -04:00
  • a9e5707f74 Removing extra YAML record start "---" Conor Richard 2022-09-17 21:37:30 -04:00
  • 59808608e7 Merge pull request #180 from wietze/new/CustomShellHost Conor Richard 2022-09-17 21:34:04 -04:00
  • 05faad73b2 Removing extra YAML record start "---" Conor Richard 2022-09-17 21:32:13 -04:00
  • c22d17a116 Merge pull request #176 from akat12/Ssh Conor Richard 2022-09-17 21:25:49 -04:00
  • 14896a1436 Removed trailing space on line 3 Conor Richard 2022-09-17 21:24:04 -04:00
  • 730359aa0d Changed AWL MitreID and removed extra YAML record start "---" Conor Richard 2022-09-17 21:21:13 -04:00
  • aa698337ff Merge pull request #148 from elliotkillick/fsutil Conor Richard 2022-09-17 08:10:53 -04:00
  • 181672267b Adding quotes since the ":" falls at the end to fix linting error Conor Richard 2022-09-17 08:09:27 -04:00
  • 4615fbc582 fixing indentation in line 14 Conor Richard 2022-09-17 08:04:58 -04:00
  • 2759dd0565 Adding USN deletion that @bohops mentioned in #148 notes Conor Richard 2022-09-17 08:01:53 -04:00
  • e878c66e6f Cleaning YAML, updated new category Tamper Conor Richard 2022-09-17 07:55:16 -04:00
  • f5c797a888 Merge pull request #147 from elliotkillick/DeviceCredentialDeployment Conor Richard 2022-09-17 07:52:29 -04:00
  • 7dd6ca24aa Removing invalid MiterLink key. Conor Richard 2022-09-17 07:50:44 -04:00
  • 1e6d6d23cc Removing extra document start "---" and updating category to Conceal. Conor Richard 2022-09-17 07:47:06 -04:00
  • 61043ccf0b Merge pull request #245 from gtworek/patch-1 Conor Richard 2022-09-17 00:09:22 -04:00
  • 2689786b59 Update Ldifde.yml Conor Richard 2022-09-17 00:06:25 -04:00
  • 9875eb2ed2 Update Ldifde.yml Conor Richard 2022-09-17 00:03:20 -04:00
  • 2c9a7a97ce Merge pull request #244 from 721574n/tristan_add Conor Richard 2022-09-16 23:46:43 -04:00
  • 4759886a5c Merge pull request #241 from fslds/alias_introduction Conor Richard 2022-09-16 13:24:35 -04:00
  • 37291b9035 Correcting the YML template to match validation. fslds 2022-09-16 11:37:13 +00:00
  • d780de4ece Prep for new yamllint Filipe Spencer 2022-09-16 11:29:26 +00:00
  • 3347e43b3f Merge branch 'master' into alias_introduction Conor Richard 2022-09-15 13:54:50 -04:00
  • 5e55bcb82e Merge pull request #251 from xenoscr/master Conor Richard 2022-09-15 13:46:31 -04:00
  • 033598bc77 Fixing indentation in YML-Schema.yml xenoscr 2022-09-15 13:44:18 -04:00
  • e37d01107b Adding Coneal & Tamper categories to template and Schema. xenoscr 2022-09-15 13:36:30 -04:00
  • dfb30f194f Tweaked the Link regex to allow anchor tags and the handle regex to permit blank entries. xenoscr 2022-09-13 23:37:10 -04:00
  • ee68df7f26 Put schema back to previous state and fixed non-compliant Link in At.yml xenoscr 2022-09-13 23:06:42 -04:00
  • 9515d43301 Attempting to fixe regex xenoscr 2022-09-13 22:58:12 -04:00
  • 92424a40de Implimenting requested changes from PR #251 review from @wietze. xenoscr 2022-09-13 22:51:52 -04:00
  • 396cd47710 Removing reviewdog yamllint that does not appear to work and falling back to normal yamllint. xenoscr 2022-09-11 13:25:58 -04:00
  • e10341af15 Setting level to error for reviewdog linting. xenoscr 2022-09-11 13:20:35 -04:00
  • 9712ff088a Adding path to reviewdog yamllint xenoscr 2022-09-11 13:16:56 -04:00
  • 9aaa4903e9 Fixing issue with colons. xenoscr 2022-09-11 13:02:20 -04:00
  • 43b48f57ac Making final changes to workflows. xenoscr 2022-09-11 12:58:54 -04:00
  • 2c3653f0c4 Fixing more file formatting issues. xenoscr 2022-09-11 01:36:14 -04:00
  • 654cdd2d61 Fixing file formating. xenoscr 2022-09-11 01:33:36 -04:00
  • 3d6a4be2a5 Fixing more formatting errors. xenoscr 2022-09-11 01:23:21 -04:00
  • bdf012a206 Changing yaml lint to error on unwanted conditions. xenoscr 2022-09-11 01:08:37 -04:00
  • 98813fe01b Fixing errors found in yaml lint action. xenoscr 2022-09-11 01:07:18 -04:00
  • 7bb5a8a8e3 Updating yaml lint check to only check the yml folder xenoscr 2022-09-11 00:38:05 -04:00
  • fde53748f2 Fixed indent in yaml linting workflow xenoscr 2022-09-11 00:30:03 -04:00
  • e91d11efc0 Combining yaml linting and validation xenoscr 2022-09-11 00:28:17 -04:00
  • 6e253a7a38 Adding missing OperatingSystem values. xenoscr 2022-09-11 00:22:36 -04:00
  • 68e5795aec Fixing Acknowledgement values. xenoscr 2022-09-11 00:20:05 -04:00
  • aa1e1ea2be Adding no defualt paths to pass schema validations xenoscr 2022-09-11 00:16:59 -04:00
  • c933426c1a Adding missing Path value. xenoscr 2022-09-11 00:03:30 -04:00
  • 1bd305e3a3 Adding missing Usecase values. xenoscr 2022-09-10 23:53:21 -04:00