 ljstella
|
6d74d225e9
|
Datestamped lookup
|
2024-07-29 08:38:55 -05:00 |
|
|
ljstella
|
f1a79b1d50
|
Converting to KVstore for exceptions
|
2024-07-26 11:57:09 -05:00 |
|
|
ljstella
|
3b6801f026
|
Datestamped lookup
|
2024-07-26 10:45:32 -05:00 |
|
|
Lou Stella
|
a7efe3eb3d
|
Merge branch 'develop' into nterl0k-rmm_must_die_update_1
|
2024-07-26 10:43:00 -05:00 |
|
|
Lou Stella
|
09eb52ec50
|
Merge branch 'develop' into nterl0k-rmm_must_die_update_1
|
2024-07-26 10:32:02 -05:00 |
|
|
Lou Stella
|
d3a37d71e0
|
Merge branch 'develop' into nterl0k-t1036-lolbash-your-face
|
2024-07-26 10:31:56 -05:00 |
|
|
ljstella
|
2e1d002b2b
|
Datestamped lookup
|
2024-07-25 09:23:35 -05:00 |
|
|
Lou Stella
|
135557163e
|
Merge branch 'develop' into nterl0k-rmm_must_die_update_1
|
2024-07-24 15:41:57 -05:00 |
|
|
Bhavin Patel
|
e22f9bf6b4
|
Merge branch 'develop' into nterl0k-t1036-lolbash-your-face
|
2024-07-24 13:16:29 -05:00 |
|
|
Bhavin Patel
|
488a5eab15
|
Branch was auto-updated.
|
2024-07-24 13:12:37 -05:00 |
|
|
Bhavin Patel
|
c21a1e7752
|
remove spl lookups
|
2024-07-24 12:20:31 -05:00 |
|
|
Bhavin Patel
|
3efaf44ecb
|
Merge branch 'develop' into nterl0k-t1036-lolbash-your-face
|
2024-07-23 12:19:06 -07:00 |
|
|
Bhavin Patel
|
7e2f6d6843
|
Branch was auto-updated.
|
2024-07-23 11:24:54 -07:00 |
|
|
Bhavin Patel
|
c0d5fd22e5
|
remove unused files
|
2024-07-23 13:20:04 -05:00 |
|
|
Steven Dick
|
567010cde4
|
Update remote_access_software.csv
Added additional entries for Computrace/Absolute/Lowjack RMM
|
2024-07-09 15:28:17 -04:00 |
|
|
Steven Dick
|
a2d364979a
|
Add files via upload
|
2024-07-09 08:49:07 -04:00 |
|
|
dluxtron
|
65e63e4193
|
Updating detections
|
2024-07-02 11:32:59 +10:00 |
|
|
Lou Stella
|
7fbd13a3dc
|
Release v4.35.0
|
2024-07-01 17:26:50 +00:00 |
|
|
Bhavin Patel
|
b0eaed8f75
|
ESCU Release v4.31.0
|
2024-05-08 16:05:40 +00:00 |
|
|
Steven Dick
|
dc359a4d2d
|
Update lolbas_file_path.csv
Added a number of corrects based on production environment usage and errors in lolbas project source data. Update for 2024
|
2024-05-03 11:32:51 -04:00 |
|
|
Steven Dick
|
43de77e094
|
Update lolbas_file_path.yml
Updates to add file path as wildcard and only return 1 result for cleaner output
|
2024-05-03 11:31:11 -04:00 |
|
|
Bhavin Patel
|
72e29c764f
|
ESCU Release Branch - v4.30.0
|
2024-04-17 20:44:56 +00:00 |
|
|
Bhavin Patel
|
7283ba3723
|
ESCU Release Branch v4.27.0
|
2024-03-20 20:01:18 +00:00 |
|
|
Bhavin Patel
|
046acb8871
|
ESCU v4.26.0 Release branch
|
2024-03-06 19:30:20 +00:00 |
|
|
Bhavin Patel
|
3d280b788a
|
Release v4.21.0
|
2024-01-22 22:40:14 +00:00 |
|
|
Bhavin Patel
|
7fda817c23
|
Release 4.19.0
|
2024-01-10 17:21:34 +00:00 |
|
|
Eric McGinnis
|
06a8a487ac
|
Release v4.18.0
|
2023-12-20 16:18:23 +00:00 |
|
|
Bhavin Patel
|
71fad8cc55
|
4.17.0 release branch
|
2023-12-06 18:40:13 +00:00 |
|
|
Eric McGinnis
|
186f27cfe0
|
Push new search to address SVD updates
|
2023-11-22 22:11:06 +00:00 |
|
|
Bhavin Patel
|
196d618f2f
|
Release v4.15.0
|
2023-11-01 19:24:56 +00:00 |
|
|
mvelazco
|
a20f6b726b
|
adding new detection - diamond ticket
|
2023-10-06 15:46:36 -04:00 |
|
|
pyth0n1c
|
732aec3f95
|
Delete detection and migrate
logic and documentation to risky
command lookup file. Update macro
to point to new risky command csv.
Fiox some opservables.
|
2023-09-28 14:51:28 -07:00 |
|
|
pyth0n1c
|
70d84aa982
|
Fix format of lookup file - remove spaces that caused parsing issues.
|
2023-08-30 07:58:07 -07:00 |
|
|
pyth0n1c
|
9a2229329d
|
Another detections update. Matching release dates in files with real release date.
|
2023-08-29 16:44:36 -07:00 |
|
|
pyth0n1c
|
d838ab5435
|
updates to lookups, created new lookup, refined detection
|
2023-08-23 14:49:33 -07:00 |
|
|
pyth0n1c
|
acc83e574d
|
more detection and documentation updates
|
2023-08-22 16:07:12 -07:00 |
|
|
Bhavin Patel
|
0ae18ce9a8
|
spl duplicate and fixes
|
2023-07-28 14:34:00 -05:00 |
|
|
pyth0n1c
|
5946620449
|
Fixing quotation marks that SHOULD have
been included in a field but were removed.
|
2023-06-27 13:02:02 -07:00 |
|
|
pyth0n1c
|
a9dc524ad9
|
Make changes to lookup validation to
ensure that the structure of .csv files,
along with their quoting and number of
fields, is correct.
|
2023-06-27 12:07:55 -07:00 |
|
|
Bhavin Patel
|
7cbe7c87c9
|
Update previously_seen_api_calls_from_user_roles.yml
|
2023-06-12 15:40:37 -07:00 |
|
|
Bhavin Patel
|
266a2a775b
|
adding lookups
|
2023-06-12 15:26:27 -07:00 |
|
|
srv-rr-gh-researchbt
|
0e192e2b8a
|
Branch was auto-updated.
|
2023-06-12 15:10:08 -07:00 |
|
|
Namratha Sreekanta
|
0782930137
|
Adding missing lookup files
|
2023-06-12 13:56:20 -07:00 |
|
|
patel-bhavin
|
30ad4d6eab
|
only kvstore conversion
|
2023-05-22 17:35:13 -07:00 |
|
|
srv-rr-gh-researchbt
|
d57aaa64aa
|
Branch was auto-updated.
|
2023-05-02 15:02:50 -07:00 |
|
|
mvelazco
|
39a1645e69
|
adding new detection
|
2023-04-25 17:04:46 -04:00 |
|
|
mvelazco
|
1841df5e4f
|
adding detection
|
2023-04-25 16:11:37 -04:00 |
|
|
pyth0n1c
|
44875375e2
|
Removed a duplicate macro
|
2023-04-14 15:35:45 -07:00 |
|
|
Michael Haag
|
89dff5cb65
|
dns
|
2023-03-30 12:15:41 -06:00 |
|
|
Bhavin Patel
|
3caf195760
|
Merge pull request #2569 from VatsalJagani/madusa-ransomware
Added medusa ransomware file extension and note file names.
|
2023-03-20 17:16:29 -05:00 |
|