5 Commits

Author	SHA1	Message	Date
Eric	d9960562b8	Bump versions for every detection, since everything will have a different conf stanza due to added fields. Don't re-bump things that already had their version bumped after the last release - this is a check that now causes a contentctl inspect failure. Finally, update all of the versions to today since this is the last time that the contents of the stanza is different.	2025-05-02 14:10:46 -07:00
Bhavin Patel	e6db474205	two new Mike detection fixes	2025-04-01 14:51:22 -07:00
Michael Haag	452378b283	fixor	2025-04-01 14:37:35 -06:00
Michael Haag	5b072d20cd	Jesse Hunter Added ... Added Jesse Hunter	2025-03-24 12:46:57 -06:00
Michael Haag	4ae8de7c58	Clear and Present Haag-er ... Adds new detections and story for ZDI-CAN-25373 Windows shortcut zero-day vulnerability: - Windows SSH ProxyCommand abuse detection - Windows Explorer LNK exploit with padding detection - Windows Explorer spawning PowerShell/CMD detection - Analytic story covering APT campaigns exploiting this vulnerability Thank you to AJ and Hunter (Community) for the assist!	2025-03-24 12:31:32 -06:00