Commit Graph

219 Commits

Author SHA1 Message Date
Bhavin Patel 3db9560510 updating conflcits 2024-08-19 13:31:34 +05:30
ljstella 5f30d2989b Remove old version 2024-08-07 13:34:36 -05:00
Lou Stella 863813645f Merge branch 'develop' into nterl0k-o365-azure-workload-1 2024-08-07 13:31:17 -05:00
ljstella 0091d78210 Account for new name 2024-08-07 13:30:26 -05:00
ljstella f01f6957f9 Updating datestamp 2024-08-07 13:29:34 -05:00
ljstella ca30ffcc40 Updating lookup name 2024-08-07 13:20:21 -05:00
Bhavin Patel d74e6f7991 updating app on S3 and merge conflicts 2024-08-01 14:37:10 -07:00
ljstella 6d74d225e9 Datestamped lookup 2024-07-29 08:38:55 -05:00
ljstella f1a79b1d50 Converting to KVstore for exceptions 2024-07-26 11:57:09 -05:00
ljstella 3b6801f026 Datestamped lookup 2024-07-26 10:45:32 -05:00
Lou Stella a7efe3eb3d Merge branch 'develop' into nterl0k-rmm_must_die_update_1 2024-07-26 10:43:00 -05:00
Lou Stella 09eb52ec50 Merge branch 'develop' into nterl0k-rmm_must_die_update_1 2024-07-26 10:32:02 -05:00
Lou Stella d3a37d71e0 Merge branch 'develop' into nterl0k-t1036-lolbash-your-face 2024-07-26 10:31:56 -05:00
ljstella 048f73d307 Datestamped lookup 2024-07-25 09:26:26 -05:00
ljstella 2e1d002b2b Datestamped lookup 2024-07-25 09:23:35 -05:00
Lou Stella 135557163e Merge branch 'develop' into nterl0k-rmm_must_die_update_1 2024-07-24 15:41:57 -05:00
Lou Stella 06b7396d11 Merge branch 'develop' into nterl0k-o365-azure-workload-1 2024-07-24 15:39:01 -05:00
Bhavin Patel e22f9bf6b4 Merge branch 'develop' into nterl0k-t1036-lolbash-your-face 2024-07-24 13:16:29 -05:00
Bhavin Patel 488a5eab15 Branch was auto-updated. 2024-07-24 13:12:37 -05:00
Bhavin Patel c21a1e7752 remove spl lookups 2024-07-24 12:20:31 -05:00
Bhavin Patel cc7efa14a6 Merge branch 'develop' into nterl0k-o365-azure-workload-1 2024-07-23 13:09:45 -07:00
Bhavin Patel 3efaf44ecb Merge branch 'develop' into nterl0k-t1036-lolbash-your-face 2024-07-23 12:19:06 -07:00
Bhavin Patel 7e2f6d6843 Branch was auto-updated. 2024-07-23 11:24:54 -07:00
Bhavin Patel 43c7993c4b Branch was auto-updated. 2024-07-23 11:24:53 -07:00
Bhavin Patel c0d5fd22e5 remove unused files 2024-07-23 13:20:04 -05:00
Steven Dick 567010cde4 Update remote_access_software.csv
Added additional entries for Computrace/Absolute/Lowjack RMM
2024-07-09 15:28:17 -04:00
Steven Dick a2d364979a Add files via upload 2024-07-09 08:49:07 -04:00
dluxtron f98ae45f1c Revert "Updating detections"
This reverts commit 65e63e4193.
2024-07-02 12:36:08 +10:00
dluxtron 331d992114 adding AD ACL and GPO related detections 2024-07-02 11:56:06 +10:00
dluxtron 05ee579469 adding AD ACL and GPO related detections 2024-07-02 11:52:21 +10:00
dluxtron 65e63e4193 Updating detections 2024-07-02 11:32:59 +10:00
Lou Stella 7fbd13a3dc Release v4.35.0 2024-07-01 17:26:50 +00:00
Bhavin Patel b0eaed8f75 ESCU Release v4.31.0 2024-05-08 16:05:40 +00:00
Steven Dick dc359a4d2d Update lolbas_file_path.csv
Added a number of corrects based on production environment usage and errors in lolbas project source data. Update for 2024
2024-05-03 11:32:51 -04:00
Steven Dick 43de77e094 Update lolbas_file_path.yml
Updates to add file path as wildcard and only return 1 result for cleaner output
2024-05-03 11:31:11 -04:00
Bhavin Patel 72e29c764f ESCU Release Branch - v4.30.0 2024-04-17 20:44:56 +00:00
Steven Dick 7d0ab42c20 Add files via upload 2024-04-13 15:34:43 -04:00
Bhavin Patel 7283ba3723 ESCU Release Branch v4.27.0 2024-03-20 20:01:18 +00:00
Bhavin Patel 046acb8871 ESCU v4.26.0 Release branch 2024-03-06 19:30:20 +00:00
Bhavin Patel 3d280b788a Release v4.21.0 2024-01-22 22:40:14 +00:00
Bhavin Patel 7fda817c23 Release 4.19.0 2024-01-10 17:21:34 +00:00
Eric McGinnis 06a8a487ac Release v4.18.0 2023-12-20 16:18:23 +00:00
Bhavin Patel 71fad8cc55 4.17.0 release branch 2023-12-06 18:40:13 +00:00
Eric McGinnis 186f27cfe0 Push new search to address SVD updates 2023-11-22 22:11:06 +00:00
Bhavin Patel 196d618f2f Release v4.15.0 2023-11-01 19:24:56 +00:00
mvelazco a20f6b726b adding new detection - diamond ticket 2023-10-06 15:46:36 -04:00
pyth0n1c 732aec3f95 Delete detection and migrate
logic and documentation to risky
command lookup file. Update macro
to point to new risky command csv.
Fiox some opservables.
2023-09-28 14:51:28 -07:00
pyth0n1c 70d84aa982 Fix format of lookup file - remove spaces that caused parsing issues. 2023-08-30 07:58:07 -07:00
pyth0n1c 9a2229329d Another detections update. Matching release dates in files with real release date. 2023-08-29 16:44:36 -07:00
pyth0n1c d838ab5435 updates to lookups, created new lookup, refined detection 2023-08-23 14:49:33 -07:00