0f93570194
Index updated
2022-04-12 17:53:58 +00:00
b942980fcf
Merge pull request #424 from joshlemon/patch-1
...
Create RANSOM_Revix.yar
2022-04-12 19:53:15 +02:00
1de664c390
Index updated
2022-04-12 15:51:21 +00:00
cf3a8653d3
Fixed #421 Deprecated rule MALW_Retefe.yar
2022-04-12 17:50:28 +02:00
5a719603d3
Index updated
2022-04-12 15:44:09 +00:00
73fe852af0
Merge pull request #426 from KatsuragiCSL/master
...
Added rule for executables created by pyinstaller on OSX
2022-04-12 17:43:18 +02:00
338389f0bc
Update malware_index.yar
2022-04-01 17:14:59 +08:00
8f0aad67ea
Update index.yar
2022-04-01 17:14:33 +08:00
1dabb33f73
pyinstaller on macos
2022-04-01 17:12:35 +08:00
d5b6728e9d
Create RANSOM_Revix.yar
2021-12-07 15:46:02 +11:00
61e2fc3c57
Index updated
2021-11-18 08:11:18 +00:00
1d7293e26c
Merge pull request #423 from RandomRhythm/patch-1
...
Tighten Glasses rule
2021-11-18 09:10:29 +01:00
12c21f7667
Tighten Glasses rule
...
Marked GlassesCode rule private to prevent alerting. Modified Glasses rule to require both GlassesCode and GlassesStrings to limit alerting. Added a reference URL and a reference file hash value to the rules. Updated the last modified dates. Tested rules against the reference hash file with both GlassesStrings and Glasses producing detections.
Fixes #422
2021-11-17 21:22:17 -07:00
b4126f1d10
Index updated
2021-10-08 12:38:53 +00:00
56c5e06b41
Fix #420
2021-10-08 14:36:50 +02:00
09d6f65086
Update Maldoc_CVE_2017_11882.yar
...
now it only detects documents
2021-10-08 14:31:22 +02:00
d1851b6364
Index updated
2021-08-25 22:11:45 +00:00
23261cec5f
Fixes #419
2021-08-26 00:10:58 +02:00
10b1684808
Index updated
2021-08-05 14:59:14 +00:00
1967dff8dd
Merge pull request #415 from sylvainpelissier/ecc_order
...
Add BLS12-381 subgroup order
2021-08-05 16:52:11 +02:00
05f0665108
Merge pull request #417 from CYB3RMX/patch-1
...
Added msql database usage checker
2021-08-05 16:51:56 +02:00
fae25c09e3
Merge pull request #413 from Xyl2k/master
...
Create MALW_MacGyver.yar
2021-08-05 16:51:36 +02:00
0d8952546a
Added msql database usage checker
2021-08-05 14:09:30 +00:00
0550041295
Add BLS12-381 subgroup order
2021-07-30 14:39:55 +02:00
11e24a0080
Create MALW_MacGyver.yar
...
rule to detect smard-card related hacktool/malwares
2021-05-11 18:14:14 +02:00
a7463b2451
Index updated
2021-04-21 06:31:28 +00:00
4d372eaaec
Merge pull request #410 from manfred-kaiser/master
...
Added Rule for tweetable-polyglot-png
2021-04-21 08:30:01 +02:00
3ca61e7e78
Update tweetable-polyglot-png.yar
2021-03-23 10:32:23 +01:00
292a3e5976
Update packers_index.yar
2021-03-23 09:44:54 +01:00
099090a809
Added TweetablePolygonPng
2021-03-23 09:44:01 +01:00
3872244500
Index updated
2021-03-09 14:47:48 +00:00
5d1f42f64f
Merge pull request #407 from RandomRhythm/master
...
Include license text
2021-03-09 15:46:45 +01:00
51be7dbf63
PHP and ASPX China Chopper
...
Signed-off-by: Ryan B <randomrhythm@rhythmengineering.com >
2021-02-27 15:37:04 -07:00
f1ea16a62c
Merge remote-tracking branch 'upstream/master' into master
2021-02-27 15:02:11 -07:00
e3e442d4bc
Include license text
...
Signed-off-by: Ryan B <randomrhythm@rhythmengineering.com >
2021-02-27 15:02:06 -07:00
85cb1fad9a
Index updated
2021-02-26 11:20:38 +00:00
cc76f933e3
Update README.md
2021-02-26 12:19:50 +01:00
e388b60736
Index updated
2021-02-05 16:57:08 +00:00
5021ddc151
Merge pull request #400 from 2d4d/master
...
add TOOLKIT_Redteam_Tools_by_Name.yar, TOOLKIT_Redteam_Tools_by_GUID.…
2021-02-05 17:56:18 +01:00
1605470db0
add TOOLKIT_Redteam_Tools_by_Name.yar, TOOLKIT_Redteam_Tools_by_GUID.yar, TOOLKIT_Solarwinds_credential_stealer.yar
...
rules to detect 339 hacktools, mostly c#
2021-01-23 14:57:42 +01:00
d3b9d62e13
Index updated
2020-12-28 21:05:54 +00:00
608de9dfa6
Merge pull request #388 from Xyl2k/patch-4
...
Create MALW_PurpleWave.yar
2020-12-28 22:04:58 +01:00
f36eca9d87
Merge pull request #389 from Xyl2k/patch-3
...
Create Email_PHP_Mailer.yar
2020-12-28 22:04:10 +01:00
f590ac808f
Merge pull request #390 from RandomRhythm/master
...
change file type comment from exe to jar for JavaDropper : RAT
2020-12-28 22:03:33 +01:00
a1f31484ad
Merge pull request #392 from sylvainpelissier/master
...
Add rules for SipHash and Aria
2020-12-28 22:01:41 +01:00
6b7daa9068
Index updated
2020-12-28 20:32:25 +00:00
0b00b5cb92
Merge pull request #393 from jinwoov/jk-stuxnet-rule
...
Stuxnet python rule
2020-12-28 21:31:41 +01:00
2e531cc2e0
trying to pass the CI pipeline
2020-12-23 23:09:32 -06:00
c7c914003c
added stuxnet python source code rule
2020-12-23 23:00:52 -06:00
4f362cca8a
added rule for python stuxnet source code.
2020-12-23 22:46:38 -06:00
yararules