From 1cffa2e0fc2b4257d42929c743f16e15fde38bf1 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 11 Jan 2021 14:03:34 +0000 Subject: [PATCH 1/3] Bump importlib-metadata from 3.3.0 to 3.4.0 Bumps [importlib-metadata](https://github.com/python/importlib_metadata) from 3.3.0 to 3.4.0. - [Release notes](https://github.com/python/importlib_metadata/releases) - [Changelog](https://github.com/python/importlib_metadata/blob/main/CHANGES.rst) - [Commits](https://github.com/python/importlib_metadata/compare/v3.3.0...v3.4.0) Signed-off-by: dependabot[bot] --- automated_detection_testing/requirements.txt | 2 +- requirements.txt | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/automated_detection_testing/requirements.txt b/automated_detection_testing/requirements.txt index bc53fd314e..4d7f903d8f 100644 --- a/automated_detection_testing/requirements.txt +++ b/automated_detection_testing/requirements.txt @@ -30,7 +30,7 @@ gitdb==4.0.5 GitPython==3.1.12 identify==1.5.11 idna==2.8 -importlib-metadata==3.3.0 +importlib-metadata==3.4.0 Jinja2==2.10.3 jmespath==0.10.0 lockfile==0.12.2 diff --git a/requirements.txt b/requirements.txt index 7009f6946c..6562394400 100644 --- a/requirements.txt +++ b/requirements.txt @@ -15,7 +15,7 @@ gitdb==4.0.5 humanfriendly==9.1 identify==1.5.11 idna==2.10 -importlib-metadata==3.3.0 +importlib-metadata==3.4.0 importlib-resources==4.1.1 Jinja2==2.11.2 jsonschema==3.2.0 From fefa3038e20f13ec845199d46636af0f1095afab Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 20 Jan 2021 14:10:16 +0000 Subject: [PATCH 2/3] Bump pyyaml from 5.3.1 to 5.4 Bumps [pyyaml](https://github.com/yaml/pyyaml) from 5.3.1 to 5.4. - [Release notes](https://github.com/yaml/pyyaml/releases) - [Changelog](https://github.com/yaml/pyyaml/blob/master/CHANGES) - [Commits](https://github.com/yaml/pyyaml/compare/5.3.1...5.4) Signed-off-by: dependabot[bot] --- automated_detection_testing/requirements.txt | 2 +- requirements.txt | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/automated_detection_testing/requirements.txt b/automated_detection_testing/requirements.txt index e92d49a49c..d8bacb4c48 100644 --- a/automated_detection_testing/requirements.txt +++ b/automated_detection_testing/requirements.txt @@ -62,7 +62,7 @@ python-daemon==2.2.4 python-dateutil==2.8.1 python-terraform==0.10.1 pywinrm==0.4.1 -PyYAML==5.3.1 +PyYAML==5.4 requests==2.25.1 requests-ntlm==1.1.0 s3transfer==0.3.4 diff --git a/requirements.txt b/requirements.txt index 52482216c1..ddca791484 100644 --- a/requirements.txt +++ b/requirements.txt @@ -27,7 +27,7 @@ pre-commit==2.9.3 pyrsistent==0.17.3 python-dateutil==2.8.1 pytz==2020.5 -PyYAML==5.3.1 +PyYAML==5.4 requests==2.25.1 scandir==1.10.0 semantic-version==2.8.5 From f5e653a55205f7e6064b69c33ba1fbd81d9b48b2 Mon Sep 17 00:00:00 2001 From: bpatel Date: Thu, 21 Jan 2021 11:27:24 -0800 Subject: [PATCH 3/3] duplicate PR --- lookups/ransomware_extensions.csv | 4 ---- lookups/ransomware_extensions_lookup.yml | 1 + 2 files changed, 1 insertion(+), 4 deletions(-) diff --git a/lookups/ransomware_extensions.csv b/lookups/ransomware_extensions.csv index 042da753dc..0f003c3d8f 100644 --- a/lookups/ransomware_extensions.csv +++ b/lookups/ransomware_extensions.csv @@ -18,7 +18,6 @@ Extensions,Name .locked,ApocalypseVM .locky,AutoLocky .adr,BaksoCrypt -,Bandarchor .bart.zip,Bart .bart,Bart .perl,Bart @@ -117,9 +116,7 @@ Extensions,Name .lock93,Lock93 .crime,Lortok .oor,LowLevel04 -,Mabouia .magic,Magic -,MaktubLocker .Lock,MIRCOP .fucked,MireWare .fuck,MireWare @@ -266,7 +263,6 @@ Extensions,Name .vault,VaultCrypt .xort,VaultCrypt .trun,VaultCrypt -,VenisRansomware .Venusf,VenusLocker .Venusp,VenusLocker .CrySiS,Virus-Encoder diff --git a/lookups/ransomware_extensions_lookup.yml b/lookups/ransomware_extensions_lookup.yml index 358ecc7c49..eed0adad33 100644 --- a/lookups/ransomware_extensions_lookup.yml +++ b/lookups/ransomware_extensions_lookup.yml @@ -3,3 +3,4 @@ description: A list of file extensions that are associated with ransomware filename: ransomware_extensions.csv min_matches: 1 name: ransomware_extensions_lookup +case_sensitive_match: 'false' \ No newline at end of file