 pyth0n1c
|
34be5c0b0c
|
normalize all legacy line endings (#3931)
|
2026-03-02 23:34:35 +01:00 |
|
|
Nasreddine Bencherchali
|
6cc12a9b29
|
Analytic Enhancements and Fixes (#3850)
* update `Windows LOLBAS Executed Outside Expected Path`
* Update suspicious_email_attachment_extensions.yml
* update susp extension lookup
* some additional fixes
* Update system_processes_run_from_unexpected_locations.yml
* small changes
* Update detect_rtlo_in_file_name.yml
---------
Co-authored-by: Bhavin Patel <bhavin.j.patel91@gmail.com>
|
2026-01-12 18:36:12 +05:30 |
|
|
pyth0n1c
|
29b2332652
|
more cleanup of lookups to follow new format.
this involved renaming some CSVs to remove the
dates from them or force their naming schema to
match the corresponding YML name for CSV
detections
|
2025-01-03 10:27:49 -08:00 |
|
|
ljstella
|
2e1d002b2b
|
Datestamped lookup
|
2024-07-25 09:23:35 -05:00 |
|
|
Steven Dick
|
dc359a4d2d
|
Update lolbas_file_path.csv
Added a number of corrects based on production environment usage and errors in lolbas project source data. Update for 2024
|
2024-05-03 11:32:51 -04:00 |
|
|
d1vious
|
782b9bed8a
|
updating csv
|
2022-09-15 14:57:53 -04:00 |
|
|
d1vious
|
e43855c570
|
lolbas
|
2022-09-08 19:15:03 -04:00 |
|
|
d1vious
|
b3aa8b4bb4
|
working scripts
|
2022-09-08 18:01:46 -04:00 |
|