Commit Graph

4743 Commits

Author SHA1 Message Date
Bhavin Patel 8a6bc4e348 Merge branch 'develop' into OktaHaag 2022-10-03 13:15:37 -07:00
Michael Haag d51a604303 updates 2022-10-03 09:24:24 -06:00
srv-rr-gh-researchbt 285f866a8c Branch was auto-updated. 2022-09-29 11:07:33 -07:00
Michael Haag a1880f5770 data fix 2022-09-27 09:55:53 -06:00
Michael Haag 63f679f2fc Office Product Spawning Windows Script Host 2022-09-27 08:00:34 -06:00
pyth0n1c 5c0cf5ab00 Branch was auto-updated. 2022-09-26 17:15:12 -07:00
Michael Haag 94787c626f New content 2022-09-26 13:00:17 -06:00
pyth0n1c 2675c2b30e Branch was auto-updated. 2022-09-22 14:01:50 -07:00
pyth0n1c 7de3114478 Branch was auto-updated. 2022-09-22 14:01:49 -07:00
Michael Haag 98f46d7043 CISA AA22-264A 2022-09-22 09:25:52 -06:00
Lou Stella 986716a55f IceID -> IcedID 2022-09-22 09:20:02 -05:00
tccontre 30c770fcf5 Update windows_mail_protocol_in_non_common_process_path.yml 2022-09-21 13:20:01 +02:00
tccontre 1b74f72760 Update windows_file_transfer_protocol_in_non_common_process_path.yml 2022-09-21 13:18:09 +02:00
tccontre 45e7fb8e40 Update office_application_spawn_rundll32_process.yml 2022-09-21 12:52:00 +02:00
tccontre 859a79ccf5 Update executables_or_script_creation_in_suspicious_path.yml 2022-09-21 12:48:16 +02:00
tccontre 66cb904a18 Update office_application_drop_executable.yml 2022-09-21 12:46:26 +02:00
tccontre 2b0a406ed8 Update non_firefox_process_access_firefox_profile_dir.yml 2022-09-21 12:44:36 +02:00
tccontre 6d84252308 Update executables_or_script_creation_in_suspicious_path.yml 2022-09-21 12:42:41 +02:00
tccontre 28d6d6a529 Update non_chrome_process_accessing_chrome_default_dir.yml 2022-09-21 12:41:59 +02:00
tccontre be6c16084a agent-with-tesla-2 2022-09-21 11:24:35 +02:00
tccontre 16d4d226c3 agent-with-tesla-2 2022-09-21 10:27:23 +02:00
tccontre 85895e14a2 agent-with-tesla-2 2022-09-19 18:04:55 +02:00
tccontre 8c40b9c5fc agent-with-tesla-1 2022-09-19 11:35:19 +02:00
tccontre 888a148bbb agent-with-tesla-1 2022-09-19 11:28:07 +02:00
Michael Haag 206e826492 Update ssa___windows_execute_arbitrary_commands_with_msdt.yml 2022-09-16 13:29:25 -06:00
Michael Haag 0e9f00f19f Update ssa___windows_execute_arbitrary_commands_with_msdt.yml 2022-09-16 13:10:09 -06:00
Michael Haag 593c433ae8 fixes
fixes
2022-09-16 12:47:19 -06:00
Michael Haag 6d1734b902 msdt 2022-09-15 13:43:28 -06:00
Michael Haag 81dcbae81c Update ssa___windows_odbcconf_load_response_file.yml 2022-09-15 13:02:54 -06:00
Michael Haag 7a95a27a2c ODBC 2022-09-15 12:42:34 -06:00
Michael Haag 5e85c0dd7c Windows Ingress Tool Transfer Using Explorer SSA 2022-09-15 12:19:18 -06:00
Michael Haag 615b24fe6d PLINK 2022-09-15 10:52:56 -06:00
pyth0n1c 8f7b0aead7 Branch was auto-updated. 2022-09-15 09:33:37 -07:00
patel-bhavin 2c57c078a0 minor 2022-09-15 11:21:05 -05:00
Michael Haag 2fa429127b CISA AA22-257A tag 2022-09-15 10:07:38 -06:00
pyth0n1c 209449795f Branch was auto-updated. 2022-09-15 08:08:56 -07:00
pyth0n1c 87ec2e6846 Branch was auto-updated. 2022-09-15 08:08:56 -07:00
pyth0n1c 34109e6236 Branch was auto-updated. 2022-09-15 08:05:10 -07:00
pyth0n1c 8f8cc478c2 Branch was auto-updated. 2022-09-15 08:05:09 -07:00
pyth0n1c e6e76569e9 Branch was auto-updated. 2022-09-15 08:05:07 -07:00
pyth0n1c 6afaa4eac8 Branch was auto-updated. 2022-09-14 12:54:39 -07:00
pyth0n1c e7ea3800b2 Branch was auto-updated. 2022-09-14 12:54:36 -07:00
pyth0n1c f16c9ddf53 Branch was auto-updated. 2022-09-14 12:54:32 -07:00
pyth0n1c 990cfad629 Branch was auto-updated. 2022-09-14 12:54:31 -07:00
pyth0n1c a5a54def02 Branch was auto-updated. 2022-09-14 09:54:32 -07:00
pyth0n1c 86113bd7b2 Branch was auto-updated. 2022-09-14 09:54:30 -07:00
pyth0n1c 39cc6579ca Branch was auto-updated. 2022-09-14 09:54:25 -07:00
pyth0n1c fdb401fb0a Branch was auto-updated. 2022-09-14 09:54:21 -07:00
pyth0n1c 9dc19764bc Branch was auto-updated. 2022-09-14 09:54:15 -07:00
pyth0n1c 481c297b4a Branch was auto-updated. 2022-09-14 09:48:58 -07:00