Commit Graph

  • 2703878a74 Fixed publicKey values in tests master Kristal-g 2023-02-06 13:44:53 +02:00
  • 232858b355 Removed stripping of public key Kristal-g 2023-02-06 13:42:14 +02:00
  • c9ef51d5c7 Handle unicode domains Kristal-g 2022-11-15 12:20:15 +02:00
  • 06abd80608 Merge pull request #20 from kw2583/startbytes Kristal-g 2022-10-25 12:26:39 -04:00
  • 5d32e2135f Added test case. Ken Wolf 2022-08-17 16:27:28 -04:00
  • 07031eea6b Added sample that fails with current start bytes. Ken Wolf 2022-08-16 22:29:29 -04:00
  • dd55e64978 Updated v4 start bytes. Ken Wolf 2022-08-16 22:22:02 -04:00
  • 1a56d3ee07 Merge pull request #18 from rxwx/master Kristal-g 2022-01-04 14:00:21 +02:00
  • 9106720de1 add test for beacon 4.5 features rxwx 2022-01-04 11:25:33 +00:00
  • 2ad6f44fc5 Parse Max Retry Strategy settings on CS 4.5 Rich Warren 2021-12-15 12:28:34 +00:00
  • 61ce489492 Unpack Watermark Hash Setting on CS 4.5+ Rich Warren 2021-12-15 12:03:28 +00:00
  • fe36b15651 Merge pull request #17 from drakearonhalt/package Kristal-g 2021-12-09 11:54:50 +02:00
  • c6089adb25 Create setup.py to enable module installation via pip. drakearonhalt 2021-12-02 21:06:02 -05:00
  • 11721a49f0 Merge branch 'master' of https://github.com/Sentinel-One/CobaltStrikeParser Kristal-g 2021-11-23 11:11:43 +02:00
  • 28f9d7cf87 Print appropriate message when no file or url is found Kristal-g 2021-11-23 11:11:36 +02:00
  • e518a97f2a Merge pull request #14 from rxwx/master Kristal-g 2021-11-05 18:06:53 +02:00
  • 55e2cf9898 Update parse_beacon_config.py Rich Warren 2021-11-05 10:51:39 +00:00
  • 3ea26aa479 Add Licence Kristal-g 2021-08-08 14:03:17 +03:00
  • b5e7f4a659 Merge branch 'master' of https://github.com/Sentinel-One/CobaltStrikeParser Kristal-g 2021-05-09 12:55:37 +03:00
  • a9d8631d1b updated requirements Kristal-g 2021-05-09 12:55:09 +03:00
  • bb4dcaf216 Merge pull request #10 from nbareil/master Kristal-g 2021-05-09 12:47:43 +03:00
  • 061b5ce04d Add unittest Github action Kristal-g 2021-05-09 12:42:06 +03:00
  • 5bf395bfb3 Apply black Nicolas Bareil 2021-05-07 08:41:20 -07:00
  • 87a6d4a408 Adds unit-test for trial beacons Nicolas Bareil 2021-05-07 08:21:51 -07:00
  • aa6e4f5b56 Adds unit-test for encrypted x86 Nicolas Bareil 2021-05-07 01:42:48 -07:00
  • 845f8269d5 Adds unit-test for encrypted beacon x86_64 Nicolas Bareil 2021-05-07 01:37:49 -07:00
  • fbf1e8f30d Merging decrypt_beacons() Nicolas Bareil 2021-05-07 01:29:27 -07:00
  • 535194359a Adds unit-tests Nicolas Bareil 2021-05-07 00:58:06 -07:00
  • 5611270154 If none of the signatures match, abort! Nicolas Bareil 2021-05-06 00:45:18 -07:00
  • 2b07f53d88 Enables parse_beacon_config.py to process BEACONS that are not PE Nicolas Bareil 2021-05-05 23:55:00 -07:00
  • 1e401b89f4 comm and improvements Kristal-g 2021-04-21 13:35:11 +03:00
  • b987870e56 Merge pull request #7 from sixdub/master Kristal-g 2021-03-28 20:40:43 +03:00
  • 5a988fb5bd Leave pubkey plain commented Justin Warner 2021-03-26 08:24:14 -04:00
  • 0af3f32297 Leave pubkey plain commented Justin Warner 2021-03-26 08:23:40 -04:00
  • b89429adde Added publickey hash and hashBlob feature Justin Warner 2021-03-26 08:16:23 -04:00
  • fdae5dbe47 General improvements Kristal-g 2021-03-25 18:52:20 +02:00
  • 8172610345 Add requirements.txt file and support for xored payloads Kristal-g 2020-10-25 18:55:12 +02:00
  • 48c728a361 Fixed false positives with the short pattern Kristal-g 2020-09-09 16:51:28 +03:00
  • efecb5dfff Merge pull request #2 from usualsuspect/malleablec2 Kristal-g 2020-09-09 16:40:05 +03:00
  • 76c6453351 Added support for Malleable C2 instructions usualsuspect 2020-09-09 14:26:18 +02:00
  • 7647c29c31 Removed parsing hack Kristal-g 2020-05-19 22:57:09 +03:00
  • c826099d1d Fixed config decoding bug Kristal-g 2020-05-19 22:53:08 +03:00
  • 531169100b Give credit Kristal-g 2020-05-11 19:30:48 +03:00
  • 39dcfd9033 First commit Kristal-g 2020-05-05 19:41:09 +03:00
  • b1703e7906 Initial commit danielr-github 2020-05-05 11:04:45 +03:00