Merge branch 'develop' into detection_testing_branch

automated_detection_testing/requirements.txt

@@ -30,7 +30,7 @@ gitdb==4.0.5
 GitPython==3.1.12
 identify==1.5.13
 idna==2.8
-importlib-metadata==3.3.0
+importlib-metadata==3.4.0
 Jinja2==2.10.3
 jmespath==0.10.0
 lockfile==0.12.2
@@ -62,7 +62,7 @@ python-daemon==2.2.4
 python-dateutil==2.8.1
 python-terraform==0.10.1
 pywinrm==0.4.1
-PyYAML==5.3.1
+PyYAML==5.4
 requests==2.25.1
 requests-ntlm==1.1.0
 s3transfer==0.3.4

lookups/ransomware_extensions.csv

@@ -18,7 +18,6 @@ Extensions,Name
 .locked,ApocalypseVM
 .locky,AutoLocky
 .adr,BaksoCrypt
-,Bandarchor
 .bart.zip,Bart
 .bart,Bart
 .perl,Bart
@@ -117,9 +116,7 @@ Extensions,Name
 .lock93,Lock93
 .crime,Lortok
 .oor,LowLevel04
-,Mabouia
 .magic,Magic
-,MaktubLocker
 .Lock,MIRCOP
 .fucked,MireWare
 .fuck,MireWare
@@ -266,7 +263,6 @@ Extensions,Name
 .vault,VaultCrypt
 .xort,VaultCrypt
 .trun,VaultCrypt
-,VenisRansomware
 .Venusf,VenusLocker
 .Venusp,VenusLocker
 .CrySiS,Virus-Encoder

lookups/ransomware_extensions_lookup.yml

@@ -3,3 +3,4 @@ description: A list of file extensions that are associated with ransomware
 filename: ransomware_extensions.csv
 min_matches: 1
 name: ransomware_extensions_lookup
+case_sensitive_match: 'false'

requirements.txt

@@ -15,7 +15,7 @@ gitdb==4.0.5
 humanfriendly==9.1
 identify==1.5.13
 idna==2.10
-importlib-metadata==3.3.0
+importlib-metadata==3.4.0
 importlib-resources==4.1.1
 Jinja2==2.11.2
 jsonschema==3.2.0
@@ -27,7 +27,7 @@ pre-commit==2.9.3
 pyrsistent==0.17.3
 python-dateutil==2.8.1
 pytz==2020.5
-PyYAML==5.3.1
+PyYAML==5.4
 requests==2.25.1
 scandir==1.10.0
 semantic-version==2.8.5