mirror of
https://github.com/mthcht/ThreatHunting-Keywords
synced 2026-06-08 16:12:28 +00:00
755048bf5e
very few additions and some corrections
9.5 KiB
9.5 KiB
| 1 | keyword | metadata_keyword_regex | metadata_keyword_type | metadata_tool | metadata_description | metadata_tool_techniques | metadata_tool_tactics | metadata_malwares_name | metadata_groups_name | metadata_category | metadata_link | metadata_enable_endpoint_detection | metadata_enable_proxy_detection | metadata_tags | metadata_comment | metadata_severity_score | metadata_popularity_score | metadata_github_stars | metadata_github_forks | metadata_github_updated_at | metadata_github_created_at | metadata_entry_id |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2 | */3proxy-*.deb* | .{0,1000}\/3proxy\-.{0,1000}\.deb.{0,1000} | greyware_tool_keyword | 3proxy | 3proxy - tiny free proxy server | T1090 - T1583 - T1001 - T1132 | TA0040 - TA0001 - TA0005 - TA0006 | N/A | Lazarus Group | Defense Evasion | https://github.com/3proxy/3proxy | 1 | 1 | N/A | N/A | 8 | 10 | 4212 | 817 | 2025-04-16T18:29:51Z | 2014-04-08T08:59:11Z | 5088 |
| 3 | */3proxy-*.rpm* | .{0,1000}\/3proxy\-.{0,1000}\.rpm.{0,1000} | greyware_tool_keyword | 3proxy | 3proxy - tiny free proxy server | T1090 - T1583 - T1001 - T1132 | TA0040 - TA0001 - TA0005 - TA0006 | N/A | Lazarus Group | Defense Evasion | https://github.com/3proxy/3proxy | 1 | 1 | N/A | N/A | 8 | 10 | 4212 | 817 | 2025-04-16T18:29:51Z | 2014-04-08T08:59:11Z | 5089 |
| 4 | */3proxy-*.zip* | .{0,1000}\/3proxy\-.{0,1000}\.zip.{0,1000} | greyware_tool_keyword | 3proxy | 3proxy - tiny free proxy server | T1090 - T1583 - T1001 - T1132 | TA0040 - TA0001 - TA0005 - TA0006 | N/A | Lazarus Group | Defense Evasion | https://github.com/3proxy/3proxy | 1 | 1 | N/A | N/A | 8 | 10 | 4212 | 817 | 2025-04-16T18:29:51Z | 2014-04-08T08:59:11Z | 5090 |
| 5 | */3proxy.exe* | .{0,1000}\/3proxy\.exe.{0,1000} | greyware_tool_keyword | 3proxy | 3proxy - tiny free proxy server | T1090 - T1583 - T1001 - T1132 | TA0040 - TA0001 - TA0005 - TA0006 | N/A | Lazarus Group | Defense Evasion | https://github.com/3proxy/3proxy | 1 | 1 | N/A | N/A | 8 | 10 | 4212 | 817 | 2025-04-16T18:29:51Z | 2014-04-08T08:59:11Z | 5091 |
| 6 | */3proxy.git* | .{0,1000}\/3proxy\.git.{0,1000} | greyware_tool_keyword | 3proxy | 3proxy - tiny free proxy server | T1090 - T1583 - T1001 - T1132 | TA0040 - TA0001 - TA0005 - TA0006 | N/A | Lazarus Group | Defense Evasion | https://github.com/3proxy/3proxy | 1 | 1 | N/A | N/A | 8 | 10 | 4212 | 817 | 2025-04-16T18:29:51Z | 2014-04-08T08:59:11Z | 5092 |
| 7 | */3proxy.log* | .{0,1000}\/3proxy\.log.{0,1000} | greyware_tool_keyword | 3proxy | 3proxy - tiny free proxy server | T1090 - T1583 - T1001 - T1132 | TA0040 - TA0001 - TA0005 - TA0006 | N/A | Lazarus Group | Defense Evasion | https://github.com/3proxy/3proxy | 1 | 1 | #logfile #linux | N/A | 8 | 10 | 4212 | 817 | 2025-04-16T18:29:51Z | 2014-04-08T08:59:11Z | 5093 |
| 8 | */etc/3proxy/conf* | .{0,1000}\/etc\/3proxy\/conf.{0,1000} | greyware_tool_keyword | 3proxy | 3proxy - tiny free proxy server | T1090 - T1583 - T1001 - T1132 | TA0040 - TA0001 - TA0005 - TA0006 | N/A | Lazarus Group | Defense Evasion | https://github.com/3proxy/3proxy | 1 | 0 | #linux | N/A | 8 | 10 | 4212 | 817 | 2025-04-16T18:29:51Z | 2014-04-08T08:59:11Z | 6989 |
| 9 | *\3proxy-*.deb* | .{0,1000}\\3proxy\-.{0,1000}\.deb.{0,1000} | greyware_tool_keyword | 3proxy | 3proxy - tiny free proxy server | T1090 - T1583 - T1001 - T1132 | TA0040 - TA0001 - TA0005 - TA0006 | N/A | Lazarus Group | Defense Evasion | https://github.com/3proxy/3proxy | 1 | 0 | N/A | N/A | 8 | 10 | 4212 | 817 | 2025-04-16T18:29:51Z | 2014-04-08T08:59:11Z | 13737 |
| 10 | *\3proxy-*.rpm* | .{0,1000}\\3proxy\-.{0,1000}\.rpm.{0,1000} | greyware_tool_keyword | 3proxy | 3proxy - tiny free proxy server | T1090 - T1583 - T1001 - T1132 | TA0040 - TA0001 - TA0005 - TA0006 | N/A | Lazarus Group | Defense Evasion | https://github.com/3proxy/3proxy | 1 | 0 | N/A | N/A | 8 | 10 | 4212 | 817 | 2025-04-16T18:29:51Z | 2014-04-08T08:59:11Z | 13738 |
| 11 | *\3proxy-*.zip* | .{0,1000}\\3proxy\-.{0,1000}\.zip.{0,1000} | greyware_tool_keyword | 3proxy | 3proxy - tiny free proxy server | T1090 - T1583 - T1001 - T1132 | TA0040 - TA0001 - TA0005 - TA0006 | N/A | Lazarus Group | Defense Evasion | https://github.com/3proxy/3proxy | 1 | 0 | N/A | N/A | 8 | 10 | 4212 | 817 | 2025-04-16T18:29:51Z | 2014-04-08T08:59:11Z | 13739 |
| 12 | *\3proxy.cfg* | .{0,1000}\\3proxy\.cfg.{0,1000} | greyware_tool_keyword | 3proxy | 3proxy - tiny free proxy server | T1090 - T1583 - T1001 - T1132 | TA0040 - TA0001 - TA0005 - TA0006 | N/A | Lazarus Group | Defense Evasion | https://github.com/3proxy/3proxy | 1 | 0 | N/A | N/A | 8 | 10 | 4212 | 817 | 2025-04-16T18:29:51Z | 2014-04-08T08:59:11Z | 13740 |
| 13 | *\3proxy.exe* | .{0,1000}\\3proxy\.exe.{0,1000} | greyware_tool_keyword | 3proxy | 3proxy - tiny free proxy server | T1090 - T1583 - T1001 - T1132 | TA0040 - TA0001 - TA0005 - TA0006 | N/A | Lazarus Group | Defense Evasion | https://github.com/3proxy/3proxy | 1 | 0 | N/A | N/A | 8 | 10 | 4212 | 817 | 2025-04-16T18:29:51Z | 2014-04-08T08:59:11Z | 13741 |
| 14 | *\3proxy.key* | .{0,1000}\\3proxy\.key.{0,1000} | greyware_tool_keyword | 3proxy | 3proxy - tiny free proxy server | T1090 - T1583 - T1001 - T1132 | TA0040 - TA0001 - TA0005 - TA0006 | N/A | Lazarus Group | Defense Evasion | https://github.com/3proxy/3proxy | 1 | 0 | N/A | N/A | 8 | 10 | 4212 | 817 | 2025-04-16T18:29:51Z | 2014-04-08T08:59:11Z | 13742 |
| 15 | *\3proxy.log* | .{0,1000}\\3proxy\.log.{0,1000} | greyware_tool_keyword | 3proxy | 3proxy - tiny free proxy server | T1090 - T1583 - T1001 - T1132 | TA0040 - TA0001 - TA0005 - TA0006 | N/A | Lazarus Group | Defense Evasion | https://github.com/3proxy/3proxy | 1 | 0 | N/A | N/A | 8 | 10 | 4212 | 817 | 2025-04-16T18:29:51Z | 2014-04-08T08:59:11Z | 13743 |
| 16 | *\bin\3proxy* | .{0,1000}\\bin\\3proxy.{0,1000} | greyware_tool_keyword | 3proxy | 3proxy - tiny free proxy server | T1090 - T1583 - T1001 - T1132 | TA0040 - TA0001 - TA0005 - TA0006 | N/A | Lazarus Group | Defense Evasion | https://github.com/3proxy/3proxy | 1 | 0 | N/A | N/A | 8 | 10 | 4212 | 817 | 2025-04-16T18:29:51Z | 2014-04-08T08:59:11Z | 14303 |
| 17 | *128s3proxy.key"* | .{0,1000}128s3proxy\.key\".{0,1000} | greyware_tool_keyword | 3proxy | 3proxy - tiny free proxy server | T1090 - T1583 - T1001 - T1132 | TA0040 - TA0001 - TA0005 - TA0006 | N/A | Lazarus Group | Defense Evasion | https://github.com/3proxy/3proxy | 1 | 0 | N/A | N/A | 8 | 10 | 4212 | 817 | 2025-04-16T18:29:51Z | 2014-04-08T08:59:11Z | 22067 |
| 18 | *3proxy --install* | .{0,1000}3proxy\s\-\-install.{0,1000} | greyware_tool_keyword | 3proxy | 3proxy - tiny free proxy server | T1090 - T1583 - T1001 - T1132 | TA0040 - TA0001 - TA0005 - TA0006 | N/A | Lazarus Group | Defense Evasion | https://github.com/3proxy/3proxy | 1 | 0 | N/A | N/A | 8 | 10 | 4212 | 817 | 2025-04-16T18:29:51Z | 2014-04-08T08:59:11Z | 25287 |
| 19 | *3proxy --remove* | .{0,1000}3proxy\s\-\-remove.{0,1000} | greyware_tool_keyword | 3proxy | 3proxy - tiny free proxy server | T1090 - T1583 - T1001 - T1132 | TA0040 - TA0001 - TA0005 - TA0006 | N/A | Lazarus Group | Defense Evasion | https://github.com/3proxy/3proxy | 1 | 0 | N/A | N/A | 8 | 10 | 4212 | 817 | 2025-04-16T18:29:51Z | 2014-04-08T08:59:11Z | 25288 |
| 20 | *3proxy tiny proxy server* | .{0,1000}3proxy\stiny\sproxy\sserver.{0,1000} | greyware_tool_keyword | 3proxy | 3proxy - tiny free proxy server | T1090 - T1583 - T1001 - T1132 | TA0040 - TA0001 - TA0005 - TA0006 | N/A | Lazarus Group | Defense Evasion | https://github.com/3proxy/3proxy | 1 | 0 | N/A | N/A | 8 | 10 | 4212 | 817 | 2025-04-16T18:29:51Z | 2014-04-08T08:59:11Z | 25289 |
| 21 | *3proxy Windows Authentication plugin* | .{0,1000}3proxy\sWindows\sAuthentication\splugin.{0,1000} | greyware_tool_keyword | 3proxy | 3proxy - tiny free proxy server | T1090 - T1583 - T1001 - T1132 | TA0040 - TA0001 - TA0005 - TA0006 | N/A | Lazarus Group | Defense Evasion | https://github.com/3proxy/3proxy | 1 | 0 | N/A | N/A | 8 | 10 | 4212 | 817 | 2025-04-16T18:29:51Z | 2014-04-08T08:59:11Z | 25290 |
| 22 | *3proxy.exe --* | .{0,1000}3proxy\.exe\s\-\-.{0,1000} | greyware_tool_keyword | 3proxy | 3proxy - tiny free proxy server | T1090 - T1583 - T1001 - T1132 | TA0040 - TA0001 - TA0005 - TA0006 | N/A | Lazarus Group | Defense Evasion | https://github.com/3proxy/3proxy | 1 | 0 | N/A | N/A | 8 | 10 | 4212 | 817 | 2025-04-16T18:29:51Z | 2014-04-08T08:59:11Z | 25291 |
| 23 | *3proxy.service* | .{0,1000}3proxy\.service.{0,1000} | greyware_tool_keyword | 3proxy | 3proxy - tiny free proxy server | T1090 - T1583 - T1001 - T1132 | TA0040 - TA0001 - TA0005 - TA0006 | N/A | Lazarus Group | Defense Evasion | https://github.com/3proxy/3proxy | 1 | 0 | #servicename | linux servicename | 8 | 10 | 4212 | 817 | 2025-04-16T18:29:51Z | 2014-04-08T08:59:11Z | 25292 |
| 24 | *3proxy/3proxy* | .{0,1000}3proxy\/3proxy.{0,1000} | greyware_tool_keyword | 3proxy | 3proxy - tiny free proxy server | T1090 - T1583 - T1001 - T1132 | TA0040 - TA0001 - TA0005 - TA0006 | N/A | Lazarus Group | Defense Evasion | https://github.com/3proxy/3proxy | 1 | 1 | N/A | N/A | 8 | 10 | 4212 | 817 | 2025-04-16T18:29:51Z | 2014-04-08T08:59:11Z | 25293 |
| 25 | *3proxy@3proxy.org* | .{0,1000}3proxy\@3proxy\.org.{0,1000} | greyware_tool_keyword | 3proxy | 3proxy - tiny free proxy server | T1090 - T1583 - T1001 - T1132 | TA0040 - TA0001 - TA0005 - TA0006 | N/A | Lazarus Group | Defense Evasion | https://github.com/3proxy/3proxy | 1 | 0 | N/A | 8 | 10 | 4212 | 817 | 2025-04-16T18:29:51Z | 2014-04-08T08:59:11Z | 25294 | |
| 26 | *add3proxyuser.sh* | .{0,1000}add3proxyuser\.sh.{0,1000} | greyware_tool_keyword | 3proxy | 3proxy - tiny free proxy server | T1090 - T1583 - T1001 - T1132 | TA0040 - TA0001 - TA0005 - TA0006 | N/A | Lazarus Group | Defense Evasion | https://github.com/3proxy/3proxy | 1 | 0 | N/A | N/A | 8 | 10 | 4212 | 817 | 2025-04-16T18:29:51Z | 2014-04-08T08:59:11Z | 33308 |