Commit Graph

40 Commits

Author SHA1 Message Date
Michael Haag a3d1907490 fixes 2023-10-01 09:42:31 -06:00
Michael Haag 17ca5971d3 WS_FTP 2023-10-01 09:39:59 -06:00
Gowthamaraj rajendran e06cfa133d Edit how_to_implement for Endpoint.Processes 2023-09-15 10:58:38 -07:00
Michael Haag 391cded0c7 Flax Typhoon 2023-08-25 09:30:30 -06:00
tccontre f78e4404d2 blackbyte_campaign 2023-07-10 12:55:29 +02:00
tccontre f276d22e6c data_destruction_wiper_story 2023-04-14 10:50:14 +02:00
P4T12ICK 78909f6429 merged with develop 2023-03-03 12:40:16 +01:00
P4T12ICK fd0c8b349f updated tags 2023-01-09 09:33:30 +01:00
P4T12ICK 5ae53c9368 Migrated all detections to v4 2023-01-03 13:42:10 +01:00
Michael Haag 517048e2b8 Merge branch 'develop' into exchange2shell 2022-10-04 04:43:34 -06:00
Michael Haag 29ab52ac0b ProxyNotShell - A Tale of CVE-2022-41040 and CVE-2022-41082 2022-09-30 05:26:16 -06:00
Michael Haag 98f46d7043 CISA AA22-264A 2022-09-22 09:25:52 -06:00
Michael Haag 2fa429127b CISA AA22-257A tag 2022-09-15 10:07:38 -06:00
Rod Soto 8298acf18e powershelldetectionstaghermetic 2022-03-31 15:29:51 -07:00
P4T12ICK 6f0ee68913 Refactored security content 2022-03-09 14:43:09 +01:00
Jose Enrique Hernandez d78bb53baa Revert "Refactored security content" 2022-03-04 15:13:04 -05:00
P4T12ICK 68543a8dc1 merged with develop 2022-03-03 13:11:56 +01:00
truptilangalia-crest 179134e8ef test:removed cim version 2022-02-08 12:05:05 +05:30
truptilangalia-crest 08f0ff6405 test: Removed tas with mapping from detection files 2022-01-31 19:46:09 +05:30
P4T12ICK 4fd8604b9a removed SAAWS and automated_detection_testing flag 2022-01-27 09:50:45 +01:00
P4T12ICK 84092434a2 fixed more detections 2022-01-18 12:53:54 +01:00
research bot a1afa0fa60 updating docs and package bits [ci skip] 2021-10-28 19:55:37 +00:00
Drew Church 3b18c5abcb Added CVE tags to 35 files 2021-10-22 10:03:24 -07:00
tccontre af7ff4052e CARS_UPDATE_MITRE_ID_B6
CARS_UPDATE_MITRE_ID_B3
2021-10-13 11:24:10 +02:00
root 3a276a5de5 Added detection testing service results inW3WP Spawning Shell 2021-09-21 14:52:47 +00:00
mhaag-spl fa2b35c293 Merge branch 'develop' into The-Haag-of-The-Storm 2021-09-03 07:10:38 -06:00
mhaag-spl dfab9d28b7 ProxyShell 2021-08-24 12:53:07 -06:00
mhaag-spl 644747d578 macro'd reg cmd 2021-08-17 12:09:31 -06:00
Michael Haag c4a62635b1 Merge branch 'develop' into The-Haag-of-The-Storm 2021-08-17 11:19:42 -06:00
mhaag-spl 20000828f3 Macro'd powershell 2021-08-17 11:15:36 -06:00
P4T12ICK 5e6e987fb7 resolved merge conflicts 2021-07-21 09:22:09 +02:00
research bot 44ea56053d updating docs and package bits [ci skip] 2021-07-20 21:12:30 +00:00
mvelazco 589d3f92ed fixing extra space 2021-07-20 13:53:50 -04:00
P4T12ICK 4ddd09fd87 add analytic types to detections 2021-07-19 17:12:54 +02:00
mvelazco 31496ca1b5 fixing variables on message 2021-07-14 14:40:09 -04:00
mvelazco 54633d6bc6 RBA support take #3 2021-07-12 18:23:31 -04:00
research bot 4b27622a3f updating docs and package bits [ci skip] 2021-03-12 17:32:09 +00:00
divious1 592e63779c fixing merge conflicts 2021-03-12 11:43:55 -05:00
root 5e6347385e Added detection testing service results inW3WP Spawning Shell 2021-03-12 04:53:43 +00:00
mhaag-spl 2643be22ff w3wp spawning shell 2021-03-11 12:34:21 -07:00