75 Commits

Author	SHA1	Message	Date
Bhavin Patel	22e5ea3f83	Release Branch - ESCU v4.34.0	2024-06-26 14:41:53 +00:00
Bhavin Patel	6c5446cfbc	Release Branch - ESCU v4.32.0	2024-05-22 16:47:39 +00:00
Bhavin Patel	b0eaed8f75	ESCU Release v4.31.0	2024-05-08 16:05:40 +00:00
research bot	2bfb3b6b63	Revert "adding 4 detections from validation to production mode" ... This reverts commit ccb8986a40.	2024-04-29 15:19:55 -07:00
Jose Hernandez	ccb8986a40	adding 4 detections from validation to production mode	2024-04-29 18:07:10 -04:00
Bhavin Patel	72e29c764f	ESCU Release Branch - v4.30.0	2024-04-17 20:44:56 +00:00
Bhavin Patel	309aee5b1d	ESCU Release branch : v4.29.0	2024-04-04 17:50:37 +00:00
Eric McGinnis	9fdf182033	Release v4.24.0	2024-02-14 23:54:00 +00:00
Bhavin Patel	7fda817c23	Release 4.19.0	2024-01-10 17:21:34 +00:00
Eric McGinnis	06a8a487ac	Release v4.18.0	2023-12-20 16:18:23 +00:00
Bhavin Patel	71fad8cc55	4.17.0 release branch	2023-12-06 18:40:13 +00:00
Bhavin Patel	f3372e03c2	Release branch v4.16.0	2023-11-16 20:33:10 +00:00
Bhavin Patel	196d618f2f	Release v4.15.0	2023-11-01 19:24:56 +00:00
ljstella	9a67bbd26a	Update two detections to use IN()	2023-10-06 15:54:41 -05:00
ljstella	d40d319dfb	Reconvert from sigma with new logic	2023-10-05 16:51:23 -05:00
pyth0n1c	3d21822873	Update uuid with new one	2023-10-03 17:31:15 -07:00
Bhavin Patel	393efa390f	updating the lolbins to lowercase	2023-10-03 15:25:03 -07:00
Bhavin Patel	8f6e67c614	adding new detection	2023-10-03 09:43:22 -07:00
pyth0n1c	95f836d4f6	Support for 'status: validation' to be used ONLY for BA Detections. If this is used with a non-ba detection, an exception will be generated.	2023-10-02 16:42:39 -07:00
Bhavin Patel	fd7f9cfbf3	new_ssa_detection	2023-10-02 16:18:51 -07:00
Patrick	90e2bc27ee	merged with develop	2023-09-18 08:50:10 +02:00
P4T12ICK	fcb174d163	bug fix	2023-08-18 13:34:14 +02:00
Lou Stella	45c6fda795	Version bumps	2023-08-17 10:47:29 -05:00
Lou Stella	1832570a39	Swap back to regex with new escapes	2023-08-17 10:36:36 -05:00
Lou Stella	74a3891f78	Running mass conversion	2023-08-17 10:12:04 -05:00
Lou Stella	0052fd4a61	adding converted version	2023-08-16 15:55:34 -05:00
Lou Stella	d4eb301111	push for troulbeshooting	2023-08-16 15:42:17 -05:00
Lou Stella	024be40b55	Updated regex again	2023-08-16 15:34:17 -05:00
Lou Stella	7efd991ae8	pushing to share for troubleshooting	2023-08-16 14:44:18 -05:00
Lou Stella	ffed36c532	generated detection	2023-08-16 13:38:03 -05:00
P4T12ICK	3d55d6061b	Improved windows powershell hidden detection	2023-08-14 12:46:35 +02:00
P4T12ICK	e120a617b3	converted detections to SPL2	2023-08-10 11:46:46 +02:00
P4T12ICK	da3d925adf	converted detections to SPL2	2023-08-09 14:11:24 +02:00
P4T12ICK	01aec84d9a	converted detections to SPL2	2023-08-09 11:42:41 +02:00
P4T12ICK	1b26692ee2	converted detections to SPL2	2023-08-08 14:54:08 +02:00
P4T12ICK	903466b1a8	Improved BA detection	2023-06-22 13:26:40 +02:00
P4T12ICK	e8b6dab89a	Mark detections as experimental	2023-06-06 11:22:15 +02:00
srv-rr-gh-researchbt	e4c8db0da9	Branch was auto-updated.	2023-06-01 16:35:38 -07:00
patel-bhavin	9403f563e2	remove detection	2023-06-01 16:26:05 -07:00
srv-rr-gh-researchbt	30f40110f4	Branch was auto-updated.	2023-06-01 11:27:15 -07:00
Michael Haag	a79a2455f9	The Order of The Haag	2023-05-31 13:38:50 -06:00
srv-rr-gh-researchbt	19d67b01a4	Branch was auto-updated.	2023-05-26 11:29:05 -07:00
Lou Stella	0db1b8faf4	converted	2023-05-24 13:18:38 -05:00
mvelazco	358751bc8e	adding srs detections	2023-05-17 17:03:05 -04:00
mvelazco	5acb7033a6	fixing detection	2023-05-17 15:19:36 -04:00
P4T12ICK	92d73aae24	improvements srs detections	2023-05-08 15:34:46 +02:00
P4T12ICK	43180a41bd	bug fix srs detections	2023-05-08 10:56:12 +02:00
Lou Stella	838118f3ca	version bump	2023-04-20 13:32:18 -05:00
Lou Stella	e875bbafce	Updated description for grammar	2023-04-20 12:54:02 -05:00
Lou Stella	bc212909ec	Removed sfc.exe, which has frequent collisions with AMP for Endpoints	2023-04-20 12:48:51 -05:00