Michael Haag
|
a3d1907490
|
fixes
|
2023-10-01 09:42:31 -06:00 |
|
Michael Haag
|
17ca5971d3
|
WS_FTP
|
2023-10-01 09:39:59 -06:00 |
|
Gowthamaraj rajendran
|
e06cfa133d
|
Edit how_to_implement for Endpoint.Processes
|
2023-09-15 10:58:38 -07:00 |
|
Michael Haag
|
391cded0c7
|
Flax Typhoon
|
2023-08-25 09:30:30 -06:00 |
|
tccontre
|
f78e4404d2
|
blackbyte_campaign
|
2023-07-10 12:55:29 +02:00 |
|
tccontre
|
f276d22e6c
|
data_destruction_wiper_story
|
2023-04-14 10:50:14 +02:00 |
|
P4T12ICK
|
78909f6429
|
merged with develop
|
2023-03-03 12:40:16 +01:00 |
|
P4T12ICK
|
fd0c8b349f
|
updated tags
|
2023-01-09 09:33:30 +01:00 |
|
P4T12ICK
|
5ae53c9368
|
Migrated all detections to v4
|
2023-01-03 13:42:10 +01:00 |
|
Michael Haag
|
517048e2b8
|
Merge branch 'develop' into exchange2shell
|
2022-10-04 04:43:34 -06:00 |
|
Michael Haag
|
29ab52ac0b
|
ProxyNotShell - A Tale of CVE-2022-41040 and CVE-2022-41082
|
2022-09-30 05:26:16 -06:00 |
|
Michael Haag
|
98f46d7043
|
CISA AA22-264A
|
2022-09-22 09:25:52 -06:00 |
|
Michael Haag
|
2fa429127b
|
CISA AA22-257A tag
|
2022-09-15 10:07:38 -06:00 |
|
Rod Soto
|
8298acf18e
|
powershelldetectionstaghermetic
|
2022-03-31 15:29:51 -07:00 |
|
P4T12ICK
|
6f0ee68913
|
Refactored security content
|
2022-03-09 14:43:09 +01:00 |
|
Jose Enrique Hernandez
|
d78bb53baa
|
Revert "Refactored security content"
|
2022-03-04 15:13:04 -05:00 |
|
P4T12ICK
|
68543a8dc1
|
merged with develop
|
2022-03-03 13:11:56 +01:00 |
|
truptilangalia-crest
|
179134e8ef
|
test:removed cim version
|
2022-02-08 12:05:05 +05:30 |
|
truptilangalia-crest
|
08f0ff6405
|
test: Removed tas with mapping from detection files
|
2022-01-31 19:46:09 +05:30 |
|
P4T12ICK
|
4fd8604b9a
|
removed SAAWS and automated_detection_testing flag
|
2022-01-27 09:50:45 +01:00 |
|
P4T12ICK
|
84092434a2
|
fixed more detections
|
2022-01-18 12:53:54 +01:00 |
|
research bot
|
a1afa0fa60
|
updating docs and package bits [ci skip]
|
2021-10-28 19:55:37 +00:00 |
|
Drew Church
|
3b18c5abcb
|
Added CVE tags to 35 files
|
2021-10-22 10:03:24 -07:00 |
|
tccontre
|
af7ff4052e
|
CARS_UPDATE_MITRE_ID_B6
CARS_UPDATE_MITRE_ID_B3
|
2021-10-13 11:24:10 +02:00 |
|
root
|
3a276a5de5
|
Added detection testing service results inW3WP Spawning Shell
|
2021-09-21 14:52:47 +00:00 |
|
mhaag-spl
|
fa2b35c293
|
Merge branch 'develop' into The-Haag-of-The-Storm
|
2021-09-03 07:10:38 -06:00 |
|
mhaag-spl
|
dfab9d28b7
|
ProxyShell
|
2021-08-24 12:53:07 -06:00 |
|
mhaag-spl
|
644747d578
|
macro'd reg cmd
|
2021-08-17 12:09:31 -06:00 |
|
Michael Haag
|
c4a62635b1
|
Merge branch 'develop' into The-Haag-of-The-Storm
|
2021-08-17 11:19:42 -06:00 |
|
mhaag-spl
|
20000828f3
|
Macro'd powershell
|
2021-08-17 11:15:36 -06:00 |
|
P4T12ICK
|
5e6e987fb7
|
resolved merge conflicts
|
2021-07-21 09:22:09 +02:00 |
|
research bot
|
44ea56053d
|
updating docs and package bits [ci skip]
|
2021-07-20 21:12:30 +00:00 |
|
mvelazco
|
589d3f92ed
|
fixing extra space
|
2021-07-20 13:53:50 -04:00 |
|
P4T12ICK
|
4ddd09fd87
|
add analytic types to detections
|
2021-07-19 17:12:54 +02:00 |
|
mvelazco
|
31496ca1b5
|
fixing variables on message
|
2021-07-14 14:40:09 -04:00 |
|
mvelazco
|
54633d6bc6
|
RBA support take #3
|
2021-07-12 18:23:31 -04:00 |
|
research bot
|
4b27622a3f
|
updating docs and package bits [ci skip]
|
2021-03-12 17:32:09 +00:00 |
|
divious1
|
592e63779c
|
fixing merge conflicts
|
2021-03-12 11:43:55 -05:00 |
|
root
|
5e6347385e
|
Added detection testing service results inW3WP Spawning Shell
|
2021-03-12 04:53:43 +00:00 |
|
mhaag-spl
|
2643be22ff
|
w3wp spawning shell
|
2021-03-11 12:34:21 -07:00 |
|