 Desiree Beck
|
0aa720aa31
|
add December Newsletter (#171)
* Create 09192024.md
newsletter for MBC v3.2
* Update 09192024.md
* Update README.md
* Update 09192024.md
* Update 09192024.md
* Update 09192024.md
* Rename 09192024.md to 09242024.md
* Rename 09242024.md to 09232024.md
* Update README.md
* Update 09232024.md
* Update and rename 09232024.md to 10212024.md
* Update and rename 10212024.md to 12092024.md
* Update README.md
|
2024-12-09 10:41:09 -05:00 |
|
|
Desiree Beck
|
bd31003a22
|
Staging (#151)
* Fixing links
* Code samples (#149)
* Update obfuscated-files-or-information.md
Added code sample with some proposed formatting incl. annotations explaining broad behavior patterns
* Update obfuscated-files-or-information.md
Added brief clarification to note
* Update obfuscated-files-or-information.md
Made requested changes to format
* Update system-information-discovery.md
Added code snippet from PoisonIvy RAT
* Update debugger-detection.md
Added code with example of PEB access
* Update system-information-discovery.md
Added new method based on code snippet
* Update registry.md
Added snippet for registry key query
* Update generate-pseudorandom-sequence.md
Added example of Mersenne Twister algorithm
* Update keylogging.md
Add Dark Comet keylogging code sample
* Update dns-communication.md
Added code sample from darkcomet
* Update socket-communication.md
Added DarkComet code snippet
* Update delete-file.md
Provided DarkComet sample
* Update file-and-directory-discovery.md
Added DarkComet snippet
* Update allocate-memory.md
Added DarkComet sample
* Update modulo.md
Added Hupigon snippet
* Update get-file-attributes.md
Added Hupigon sample
* Update application-window-discovery.md
Added Hupigon snippet
* Update create-process.md
Added Hupigon snippet.
* Update conditional-execution.md
Added Hupigon snippet
* Update create-thread.md
Added Hupigon snippet
* Update resume-thread.md
Added Hupigon snippet
* Update command-and-scripting-interpreter.md
Added SmokeLoader sample
* Update change-memory-protection.md
Added SmokeLoader snippet
* Update console.md
Added snippet from SmokeLoader
* Update dynamic-analysis-evasion.md
Added Industroyer sample
* Update interprocess-communication.md
Added CobaltStrike sample
* Update read-file.md
Added Cobalt Strike snippet
* Update writes-file.md
Added cobalt strike snippet
* Update noncryptographic-hash.md
Added emotet snippet
* Update clipboard-modification.md
Added emotet snippet
* Update check-mutex.md
Added emotet sampler
* Update check-mutex.md
Fixed typo
* Update create-mutex.md
Added Emotet snippet
* Update allocate-thread-local-storage.md
Added emotet snippet
* Update registry-run-keys-startup-folder.md
Added emotet snippet
* Update wininet.md
Added EnvyScout snippet
* Update http-communication.md
Added EnvyScout snippet
* Update enumerate-threads.md
Added Envyscout snippet
* Update set-thread-local-storage-value.md
Added Envyscout sample
* Update create-directory.md
Added explosive snippet
* Update delete-directory.md
Added explosive code snippet (note: the malware is called "explosive")
* Update set-file-attributes.md
Added explosive sample
* Update terminate-process.md
Added explosive snippet
* Update terminate-thread.md
Added explosive sample
* Update move-file.md
Added Finfisher snippet
* Update screen-capture.md
Added ECCENTRICBANDWAGON snippet
* Fix links (#150)
* fix link
* fix link
* fix link
* fix link
* fix link
* fix link
* fix link
* fix link
* fix link
* fix link
* fix link
* fix link
* fix link
* fix link
* fix link
* fix link
* fix link
* fix link
* fix link
* fix link
* fix link
* fix link
* fix link
* fix link
* fix link
* fix link
* fix link
* fix link
* fix link
* fix link
* fix link
* fix link
* fix link
* fix link
* fix link
* fix link
* update mod date
* fix links
* fix links
* fix links
* fix links
* fix links
* fix links
* fix links
* fix links
* fix links
* fix links
* fix links
* fix links
* fix links
* fix links
* fix links
* fix links
* fix links
* fix links
* fix links
* fix links
* fix links
* fix links
* fix links
* fix links
* fix links
* fix links
* fix links
* fix links
* fix links
* fix links
* fix links
* update links
* update links
* update links
* update links
* update links
* update links
* update links
* update links
* update links
* update links
* update links
* update links
* update links
* update links
* update links
* update links
* update links
* update links
* update links
* update links
* update links
* update links
* update links
* update links
* update links
* update links
* update links
* update links
* update links
* update links
* update links
* update links
* update links
* update links
* update links
* update links
* update links
* update links
* update links
* update links
* update links
* update links
* update links
* update links
* update links
* update links
* update links
* update links
* update links
* update links
* update links
* update links
* Update code-discovery.md
* Update taskbar-discovery.md
* Update conditional-execution.md
* Update memory-dump-evasion.md
* Update execution-dependency.md
* Update compromise-data-integrity.md
* Update dns-communication.md
* Update http-communication.md
* Update interprocess-communication.md
* Update socket-communication.md
* Update wininet.md
* Update generate-pseudorandom-sequence.md
* Update modulo.md
* Update noncryptographic-hash.md
* Update create-directory.md
* Update delete-directory.md
* Update delete-file.md
* Update get-file-attributes.md
* Update move-file.md
* Update read-file.md
* Update terminate-thread.md
* Update set-file-attributes.md
* Update writes-file.md
* Update allocate-memory.md
* Update change-memory-protection.md
* Update console.md
* Update registry.md
* Update allocate-thread-local-storage.md
* Update check-mutex.md
* Update terminate-process.md
* Update create-mutex.md
* Update create-process.md
* Update set-thread-local-storage-value.md
* Update resume-thread.md
* Update enumerate-threads.md
* Update create-thread.md
* update for 3.1 release
* update for 3.1 release
* update for 3.1 release
---------
Co-authored-by: ryan <ryanxu@wustl.edu>
Co-authored-by: brightmt <50853930+brightmt@users.noreply.github.com>
|
2024-05-01 16:09:33 -04:00 |
|
|
Ryan Xu
|
a92e8ffdfd
|
Newsletter, editing E1510, E1560 (#137)
* Adding Newsletter
* Create 12182023.md
* Update README.md
---------
Co-authored-by: Desiree Beck <dbeck@mitre.org>
* Update e1510 (#134)
* Update clipboard-modification.md
Update to account for updates to T1115.
* Update data-encrypted-for-impact.md
fix parentheses
* Update clipboard-modification.md
* Update data-encrypted-for-impact.md
* Update clipboard-modification.md
* Moving Archive Collected Data to collection, some description updates
* Updating Last Modified
---------
Co-authored-by: Desiree Beck <dbeck@mitre.org>
|
2023-12-18 13:40:56 -05:00 |
|
|
Ryan Xu
|
f7d92d59fa
|
Staging (#124)
- Updating capa detection in behaviors
- Newsletter
- Conti malware
- pafish faq
|
2023-09-20 15:57:32 -04:00 |
|
|
Desiree Beck
|
ddbb2caa46
|
June newsletter (#106)
* june newsletter
* June newsletter
* June newsletter
* June newsletter
* June newsletter
* June newsletter
* June newsletter
* June newsletter
|
2023-06-20 23:16:01 -04:00 |
|
|
Desiree Beck
|
92b76bde3d
|
March newsletter (#86)
* march 2023 newsletter
|
2023-03-15 13:10:04 -04:00 |
|
|
Dez Beck
|
5df6d33896
|
draft dec newsletter
|
2022-12-12 13:21:15 -05:00 |
|
|
Dez Beck
|
31b9e73fd8
|
draft dec newsletter
|
2022-12-12 13:03:46 -05:00 |
|
|
Dez Beck
|
b478f86e3a
|
draft dec newsletter
|
2022-12-12 12:57:29 -05:00 |
|
|
Dez Beck
|
dbf98ecfb7
|
add newsletters
|
2022-09-08 12:42:21 -04:00 |
|