Commit Graph

Select branches

Hide Pull Requests

devin/1781148028-security-fixes

devin/1781148087-improve-error-handling

devin/1781148812-fix-cloud-metadata-bugs

main

#4

#5

#6

2025-11-19-183628

2025-11-27-020847

2025-12-04-034755

2025-12-10-021556

2025-12-16-152742-faa89aa

2026-01-09-152600-c534989

2026-01-09-152705-21a75ff

2026-01-11-174445-b3b45ff

2026-01-12-172616-b1f384a

2026-01-24-193615-7b1103c

2026-01-24-200132-95233c9

2026-02-03-172530-ce7384a

collection-ai_surface-2026-04-07-223652-4de0982

collection-ai_surface-2026-04-08-192443-2ca4ee6

collection-ai_surface-2026-04-26-004554-748b403

collection-powershell_history-2026-03-27-183152-305ffea

community-net_use-2026-05-06-135839-8fe4c15

community-notepad_grab-2026-02-08-033218-dbb42d9

community-notepad_grab-2026-02-17-190132-a017927

community-notepad_grab-2026-02-17-192804-e42d0d6

community-notepad_grab-2026-02-18-035343-da01c0b

credential_access-cloud_metadata_check-2026-05-29-145430-56363bb

discovery-power_state-2026-03-08-042845-6d767d2

discovery-proxy_enum-2026-03-10-153539-31b4b0a

discovery-proxy_enum-2026-03-11-020729-6788a44

discovery-win_version-2026-02-20-001423-c959dc3

execution-com_probe-2026-03-23-202046-5fe4f80

execution-firewall_rule-2026-03-23-122259-8aeb326

execution-service_control-2026-05-18-152359-e57ed1e

execution-wevt_logon_enum-2026-03-23-202045-5fe4f80

Mono Color

• c1e34aea28 Merge pull request #6 from atomiczsec/devin/1781148812-fix-cloud-metadata-bugs main Gavin K 2026-06-10 23:38:12 -04:00
• 0c39bea2e6 Fix bugs in cloud_metadata_check: select() error fd, O(n²) cred path, redundant URL build devin/1781148812-fix-cloud-metadata-bugs Gavin K 2026-06-11 03:34:11 +00:00
• d21f77ef45 Merge pull request #5 from atomiczsec/devin/1781148087-improve-error-handling Gavin K 2026-06-10 23:31:19 -04:00
• b1a9df6a79 Merge pull request #4 from atomiczsec/devin/1781148028-security-fixes Gavin K 2026-06-10 23:29:30 -04:00
• e1e8b82368 Improve error handling: fix silent failures and add error diagnostics devin/1781148087-improve-error-handling Gavin K 2026-06-11 03:26:03 +00:00
• 045126c9af fix: security hardening — GHA injection, wrong constant, invalid JSON devin/1781148028-security-fixes Gavin K 2026-06-11 03:21:24 +00:00
• 56363bb917 Add cloud_metadata_check BOF entry to README credential_access-cloud_metadata_check-2026-05-29-145430-56363bb atomiczsec 2026-05-29 10:54:14 -04:00
• e57ed1e5d0 add service_control BOF + gitignore for no bloat execution-service_control-2026-05-18-152359-e57ed1e atomiczsec 2026-05-18 11:23:38 -04:00
• 17a6fce074 update community readme atomiczsec 2026-05-06 14:08:53 -04:00
• 4533d230bd Add net_use BOF entry to README Gavin K 2026-05-06 10:00:19 -04:00
• 8fe4c1582b add trustedsec net_use community-net_use-2026-05-06-135839-8fe4c15 Gavin K 2026-05-06 09:58:16 -04:00
• 4b692b23c5 Revise README description for clarity and focus Gavin K 2026-05-06 09:44:19 -04:00
• 748b403bb6 Refactor ai_surface functionality and update documentation collection-ai_surface-2026-04-26-004554-748b403 atomiczsec 2026-04-25 20:45:40 -04:00
• a6cacea6f5 attribution note atomiczsec 2026-04-08 15:31:55 -04:00
• 08d9570295 fix readme Gavin K 2026-04-08 15:29:24 -04:00
• 2ca4ee6eb2 Enhance ai_surface functionality and update README collection-ai_surface-2026-04-08-192443-2ca4ee6 atomiczsec 2026-04-08 15:24:17 -04:00
• c6b7120524 trim README atomiczsec 2026-04-07 22:28:04 -04:00
• 6e95a29bd9 Clarify ai_surface functionality in README Gavin K 2026-04-07 18:38:18 -04:00
• 4de0982478 update ai_surface, new sources and collection collection-ai_surface-2026-04-07-223652-4de0982 atomiczsec 2026-04-07 18:36:17 -04:00
• 305ffeaa87 add powershell_history collection-powershell_history-2026-03-27-183152-305ffea atomiczsec 2026-03-27 14:31:36 -04:00
• 5fe4f8095a move com_probe and wevt_logon_enum to execution execution-wevt_logon_enum-2026-03-23-202045-5fe4f80 execution-com_probe-2026-03-23-202046-5fe4f80 atomiczsec 2026-03-23 16:20:30 -04:00
• 8aeb3263b4 add firewall_rule execution-firewall_rule-2026-03-23-122259-8aeb326 atomiczsec 2026-03-23 08:22:42 -04:00
• 6788a44b2b add updated pre built .o discovery-proxy_enum-2026-03-11-020729-6788a44 Gavin K 2026-03-10 22:07:14 -04:00
• 1fdbdfc66c add example output again atomiczsec 2026-03-10 21:57:46 -04:00
• d7abfdf73f Add CheckProxyMgrCache function to enumerate hidden ProxyMgr cache entries in proxy_enum.c and update README to document new functionality. atomiczsec 2026-03-10 21:56:01 -04:00
• d94e571282 add example output atomiczsec 2026-03-10 20:58:53 -04:00
• 810d633e8b update README to add proxy_enum atomiczsec 2026-03-10 11:36:46 -04:00
• 31b4b0aaa1 add proxy_enum discovery-proxy_enum-2026-03-10-153539-31b4b0a Gavin K 2026-03-10 11:35:19 -04:00
• 50c437a352 add power_state to readme atomiczsec 2026-03-07 23:30:34 -05:00
• 6d767d2289 add power_state BOF discovery-power_state-2026-03-08-042845-6d767d2 Gavin K 2026-03-07 23:28:32 -05:00
• 75425cda92 Add win_version BOF to README Gavin K 2026-02-19 23:27:38 -05:00
• c959dc38c3 add basic win_version BOF discovery-win_version-2026-02-20-001423-c959dc3 atomiczsec 2026-02-19 19:14:06 -05:00
• 962c1359ab update release markdown (#2) atomiczsec 2026-02-19 19:09:50 -05:00
• da01c0b47c addded notepad_grab multi tab support (#1) community-notepad_grab-2026-02-18-035343-da01c0b atomiczsec 2026-02-17 22:53:27 -05:00
• cee091ea75 standardizing chunking [skip ci] atomiczsec 2026-02-17 21:48:52 -05:00
• 95c6663b47 fixed make files that caused BOF to crash in some instances [skip ci] atomiczsec 2026-02-17 15:25:42 -05:00
• e42d0d69b1 Removed -ffunction-sections -fdata-sections from Makefile community-notepad_grab-2026-02-17-192804-e42d0d6 atomiczsec 2026-02-17 14:27:49 -05:00
• a017927a97 chunk notepad_grab community-notepad_grab-2026-02-17-190132-a017927 atomiczsec 2026-02-17 14:01:15 -05:00
• a9e8572d39 del bof to fix atomiczsec 2026-02-08 22:43:45 -05:00
• cc074a850b Update README to include usage instructions for notepad_grab atomiczsec 2026-02-08 22:27:00 -05:00
• 87af2abbac add GH link atomiczsec 2026-02-07 23:13:11 -05:00
• ce77235da1 add notepad grab to readme atomiczsec 2026-02-07 23:12:05 -05:00
• ffa47383fe del placeholder atomiczsec 2026-02-07 22:47:04 -05:00
• 2390a0ef9c fixing the release for the 20th time community-notepad_grab-2026-02-08-033218-dbb42d9 atomiczsec 2026-02-07 22:26:41 -05:00
• 7f57d6b108 fixed the jq parsing atomiczsec 2026-02-07 22:15:37 -05:00
• f1e75a5509 fix github action atomiczsec 2026-02-07 22:08:20 -05:00
• 1b92a9dfdc add notepad_grab atomiczsec 2026-02-07 22:07:28 -05:00
• cc4e558c22 Update Table of Contents heading for clarity atomiczsec 2026-02-05 13:51:07 -05:00
• 7917fae7cc change directory structure to mirror the MITRE framework taxonomy for easier understanding atomiczsec 2026-02-05 13:49:45 -05:00
• 9591d9af65 Update README with caution note for com_probe atomiczsec 2026-02-03 17:23:14 -05:00
• 78c1338a4e Replaced the undefined usageMsg at line 209 atomiczsec 2026-02-03 12:36:34 -05:00
• 5b4e52c9f6 Added support for manual triggers with input parameters for module path and optional tag suffix. Improved detection of changed object files (.o, .x64.o, .x86.o) and structured output into a JSON matrix for subsequent release steps. atomiczsec 2026-02-03 12:30:08 -05:00
• f4e28a5e56 Add com_probe section to README 2026-02-03-172530-ce7384a atomiczsec 2026-02-03 11:56:31 -05:00
• 4d20c589fc add com_probe BOF atomiczsec 2026-02-03 11:55:35 -05:00
• a4663fe835 remove legacy BOF atomiczsec 2026-01-24 15:02:50 -05:00
• d8b249c9af delete aad_ca_policy; replace with mdm_policy_artifacts - this is a lot more accurate 2026-01-24-200132-95233c9 atomiczsec 2026-01-24 15:01:23 -05:00
• 2d333cd1f2 update readmes for accuracy atomiczsec 2026-01-24 14:45:57 -05:00
• 7592b42d96 add session_view 2026-01-24-193615-7b1103c atomiczsec 2026-01-24 14:36:06 -05:00
• a42f2b641e Add certstore_loot section to README atomiczsec 2026-01-12 12:27:14 -05:00
• 27c983c15a add certstore_loot 2026-01-12-172616-b1f384a atomiczsec 2026-01-12 12:26:07 -05:00
• c2450b8c51 Add process_tokens_list BOF description to README atomiczsec 2026-01-11 12:45:48 -05:00
• 3ed60be26f Add files via upload 2026-01-11-174445-b3b45ff atomiczsec 2026-01-11 12:44:37 -05:00
• cb71651cb6 update README w new BOFs atomiczsec 2026-01-09 10:29:56 -05:00
• a8b470d4a4 Add files via upload 2026-01-09-152705-21a75ff atomiczsec 2026-01-09 10:26:57 -05:00
• 4cd001876a Add files via upload 2026-01-09-152600-c534989 atomiczsec 2026-01-09 10:25:47 -05:00
• b352243e5a Create placeholder atomiczsec 2026-01-09 10:23:49 -05:00
• 8c2f7586d7 fix TOC atomiczsec 2025-12-20 23:24:25 -05:00
• 652ff34067 README updates atomiczsec 2025-12-20 23:17:57 -05:00
• ad2ee97eb1 better render README in release atomiczsec 2025-12-16 12:10:23 -05:00
• c1d023429a update README atomiczsec 2025-12-16 10:30:08 -05:00
• 913f2cfbc6 upload community and schtask_enum 2025-12-16-152742-faa89aa atomiczsec 2025-12-16 10:27:34 -05:00
• aad885985b enhance release.yml to seperate release notes by .o file uploads atomiczsec 2025-12-16 10:22:32 -05:00
• 320eb43127 Enhance wevt_logon_enum in README atomiczsec 2025-12-16 10:14:49 -05:00
• 6799d27667 Update README to include additional Event IDs atomiczsec 2025-12-10 09:49:06 -05:00
• daacf01419 Add wevt_logon_enum to README.md atomiczsec 2025-12-09 21:17:33 -05:00
• e6285d5749 upload wevt_logon_enum 2025-12-10-021556 atomiczsec 2025-12-09 21:15:49 -05:00
• ab5344dfca add window_list to table atomiczsec 2025-12-03 22:49:39 -05:00
• b7a5c60e4f upload window_list 2025-12-04-034755 atomiczsec 2025-12-03 22:47:48 -05:00
• 3c8da83b22 Add aad_compliance_status section to README atomiczsec 2025-11-26 21:10:37 -05:00
• 2563d69d5f upload aad_compliance_status 2025-11-27-020847 atomiczsec 2025-11-26 21:08:36 -05:00
• 9a900dc75c Update Twitter link to X.com atomiczsec 2025-11-26 21:04:38 -05:00
• ef34cf67ac add aad policy to readme atomiczsec 2025-11-19 13:39:27 -05:00
• 76ee4dae09 Add files via upload 2025-11-19-183628 atomiczsec 2025-11-19 13:36:19 -05:00
• be8fa407ca update readme table to organize by attack chain step atomiczsec 2025-11-18 10:55:51 -05:00
• c180054f10 - update README - added github action for releases atomiczsec 2025-11-18 10:50:18 -05:00
• 2ec02759f5 add asr_status atomiczsec 2025-11-17 15:12:07 -05:00
• a04d3d83a1 Revise contact section with social media links atomiczsec 2025-11-16 10:24:51 -05:00
• d48a420573 Update README to seperate sections atomiczsec 2025-11-16 10:24:02 -05:00
• 25a3437e2a - add applocker_policy to README atomiczsec 2025-11-16 10:23:24 -05:00
• e900861744 Add applocker_policy atomiczsec 2025-11-16 10:13:22 -05:00
• 4038a0f0f7 Update README atomiczsec 2025-11-16 10:10:31 -05:00
• a16d913b6f - Move each BOF to a folder based on attack killchain, to make repo less busy - Update README to reflect new locations atomiczsec 2025-11-16 10:09:47 -05:00
• 2c98f82ebd Update README.md atomiczsec 2025-11-11 18:46:03 -05:00
• ca1c26cccc add netjoin to readme table atomiczsec 2025-11-11 13:46:14 -05:00
• 422a8d1127 add netjoin_query to repo atomiczsec 2025-11-11 13:44:57 -05:00
• e4688e3509 link folders to readme for BOF table atomiczsec 2025-11-10 15:09:39 -05:00
• 9464dd771a Standardize naming conventions in README atomiczsec 2025-11-08 20:40:25 -05:00
• 6b40072275 updated folders and files to standardize naming schemas, to make clear what is happening when a BOF is run atomiczsec 2025-11-08 20:37:54 -05:00
• ad70a08a8d update readme table for new wef_detect atomiczsec 2025-11-07 14:17:06 -05:00
• 7c63270ee0 add wef_detect to repo atomiczsec 2025-11-07 14:12:31 -05:00