admin/rasta-mouse-ThreatCheck
1
0
Fork 0
mirror of https://github.com/rasta-mouse/ThreatCheck synced 2026-06-08 17:01:57 +00:00
Code Issues Packages Projects Releases Wiki Activity
51 Commits 2 Branches 0 Tags
dev
Commit Graph

51 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Rasta Mouse 02752a5541 Refactor 
Uplift to C#12 and improve overall code quality
 2024-06-01 17:44:22 +01:00
Rasta Mouse 5588c80a50 Merge branch 'pr/4' into dev 2024-06-01 17:24:26 +01:00
Rasta Mouse 053f9b3f99 Merge branch 'pr/3' into dev 2024-06-01 17:07:32 +01:00
Rasta Mouse b787ac6fb2 Update ThreatCheck.csproj 2024-06-01 17:06:51 +01:00
Rasta Mouse 985f6d2ec8 Merge branch 'pr/1' into dev 2024-06-01 17:06:32 +01:00
Rasta Mouse c6bed29c5f Update .gitignore 2024-06-01 17:02:15 +01:00
hubbl3 5287ad5a0d missed some dead code 2024-05-17 07:54:36 -07:00
hubbl3 d4d208d8d2 fixed option message 2024-05-17 07:52:43 -07:00
Hubble 88c1c1ac48 Update README.md 2024-05-17 09:51:37 -05:00
hubbl3 9f41f907ea added comments and code clean up 2024-05-17 07:47:12 -07:00
hubbl3 dbf4506c30 updated to work with local scritps 2024-05-17 07:23:19 -07:00
m0bstar 5857bcc2fa - Simplified hex dumping method 
- Implemented correct hex labeling
 2024-03-14 17:48:22 +01:00
Michael Van Leeuwen 1b106ed5f6 Bump CommandLineParser version and target 2023-04-03 19:58:09 -07:00
Michael Van Leeuwen c279a227ab Bump dotnet to 4.8 2023-04-03 19:57:51 -07:00
Rasta Mouse 7628547a84 Merge branch 'master' of https://github.com/rasta-mouse/ThreatCheck 2020-10-09 10:36:38 +01:00
Rasta Mouse bdda6b2302 Save on method duplication 2020-10-09 10:35:57 +01:00
Rasta Mouse 3a77bca587 Delete demo.gif 2020-10-08 16:21:46 +01:00
Rasta Mouse d0097b87cd Update README.md 2020-10-08 16:21:08 +01:00
Rasta Mouse 0843ee550b Rename to ThreatCheck, add AMSI engine 2020-10-08 16:14:17 +01:00
matterpreter 943de36425 Minor syntax fix 2020-07-28 00:15:56 -04:00
Matt Hand 837d659369 Added check to make sure target file and directory exist 
Thanks @ceramic-skate0 !
 2020-07-28 00:11:00 -04:00
matterpreter 3833696c6d Removing Setup() method as I don't currently intend on fixing it 2019-09-14 15:49:24 +03:00
Matt Hand 3c07f68f42 Adding note about Defender configuration 
Temporary fix for #8
 2019-04-29 11:36:26 -04:00
matterpreter a164a277ba Rebuild of setup 
Can't seem to get a handle on `HKLM\SOFTWARE\Microsoft\Windows Defender\Spynet`, which I would imagine is a defensive feature to prevent disabling of Defender's configurations.
 2019-04-12 12:36:50 -04:00
matterpreter 4dd0e3e580 Added function to scan the whole file first 2019-04-12 09:43:21 -04:00
Matt Hand 573a16d188 Merge pull request #7 from matterpreter/dev 
Added debugging function
 2019-04-12 09:34:26 -04:00
matterpreter 8b40568a0a Create .gitignore 2019-04-12 08:41:39 -04:00
Matt Hand bb4754e114 Added debugging function 2019-04-11 21:09:34 -04:00
Matt Hand fe562965f6 Merge pull request #6 from matterpreter/dev 
Update to handle offending bytes in the first 256 bytes
 2019-04-11 20:54:15 -04:00
Matt Hand b961d1ada6 Update to handle offending bytes in the first 256 bytes 
First pass at addressing #3
 2019-04-11 20:53:07 -04:00
Matt Hand da1bece87b Merge pull request #5 from matterpreter/dev 
Adding setup checks
 2019-04-11 20:42:07 -04:00
Matt Hand 9c92d701f7 Adding setup checks 
Addressing #1 and #2
 2019-04-11 20:41:10 -04:00
Matt Hand a62aff4a6d Delete .gitignore 2019-04-10 08:26:38 -04:00
Matt Hand dcd21534a2 Create .gitattributes 2019-04-10 08:25:58 -04:00
Matt Hand aa3f3b633e Delete .gitattributes 2019-04-10 08:23:19 -04:00
Matt Hand 6680011321 Update .gitattributes 2019-04-10 08:23:02 -04:00
Matt Hand bbc56a8b91 Prerelease update 2019-04-10 08:21:45 -04:00
Matt Hand 0d8ad984be Create demo.gif 2019-04-10 08:21:13 -04:00
Matt Hand 8aabd284d9 Added feature to get signature from Defender 
Now we can see exactly what the match was!
 2019-04-10 08:14:18 -04:00
Matt Hand 621ca30a5a Implemented final checks and hex dumping feature 2019-04-10 07:13:46 -04:00
Matt Hand 13840dcef2 Added code to auto-disable some Defender features 
Automatic sample submission and real-time protection should be turned off
 2019-04-10 06:30:41 -04:00
Matt Hand 8a627d9795 Fixed loop 
Added some logic to pinpoint the exact byte where the detection condition is met and now it will alert and exit.
 2019-04-09 22:45:02 -04:00
Matt Hand 715b9dbd89 More quick maths 
Fixe dmost of the logic behind the halfsplit code. Issue now is that we can pinpoint the specific byte that Defender flags on, but since the next byte is technically okay, we increase by 50% and start the search again. This creates a dumb loop, which I'm sure I can just exit out of on condition.
 2019-04-09 22:22:30 -04:00
Matt Hand 7d8d1bbd7e Safety checks 
Squashing an infinite loop bug when the search reachend the original file's length -1.
 2019-04-09 21:25:40 -04:00
Matt Hand 44ab34ef39 Quick maths 
Fixed the math behind the overshoot/halfsplit logic
 2019-04-09 21:22:03 -04:00
matterpreter 7d06dc4ad0 Update Program.cs 2019-04-09 17:05:41 -04:00
matterpreter 43f24b869f Update Program.cs 2019-04-09 15:44:11 -04:00
matterpreter 024677850b Removing extra curly brace 2019-04-09 14:27:47 -04:00
matterpreter db9955b7ea Adding first bits 
Can take a file, split off its first half, and scan it with Defender, returning Defender's verdict
 2019-04-09 14:26:42 -04:00
Matt Hand 7255d36a4b Create base Readme 2019-04-09 10:05:01 -04:00