mirror of
https://github.com/splunk/security_content
synced 2026-06-08 17:32:49 +00:00
Nasreddine Bencherchali
9fc8942993
* new rules and updates * fix issues with ci * rename for accurate macro * update description and logic * new wbadmin rule and fix pwsh dataset * more updates for the weekend * update network rules filters * downgrade versions * Update windows_file_transfer_protocol_in_non_common_process_path.yml * add missing DS for some rules * update nirsoft lookup and add new rules * update more nirsoft stuff * update snort message * Update cisco_secure_firewall_filetype_lookup.yml * new analytic and updates / incl. fix #3730 * Update detect_new_local_admin_account.yml * add lnx dataset and fix wildcards
2.6 KiB
2.6 KiB
| 1 | filename | nirsoftFile |
|---|---|---|
| 2 | AdvancedRun*.exe | True |
| 3 | awatch*.exe | True |
| 4 | BluetoothView*.exe | True |
| 5 | BrowsingHistoryView*.exe | True |
| 6 | BulletsPassView*.exe | True |
| 7 | ChromeCacheView*.exe | True |
| 8 | ChromeHistoryView*.exe | True |
| 9 | ChromePass*.exe | True |
| 10 | cports.exe | True |
| 11 | CredentialsFileView*.exe | True |
| 12 | CredHistView*.exe | True |
| 13 | DataProtectionDecryptor*.exe | True |
| 14 | DeviceIOView*.exe | True |
| 15 | Dialupass*.exe | True |
| 16 | dllexp.exe | True |
| 17 | DNSDataView*.exe | True |
| 18 | DNSQuerySniffer*.exe | True |
| 19 | DotNetResourcesExtract*.exe | True |
| 20 | DownTester*.exe | True |
| 21 | DriverView*.exe | True |
| 22 | EncryptedRegView*.exe | True |
| 23 | ESEDatabaseView*.exe | True |
| 24 | EventLogChannelsView*.exe | True |
| 25 | ExtPassword*.exe | True |
| 26 | FastResolver*.exe | True |
| 27 | faview.exe | True |
| 28 | FBCacheView*.exe | True |
| 29 | FileTypesMan*.exe | True |
| 30 | FirefoxDownloadsView*.exe | True |
| 31 | FlashCookiesView*.exe | True |
| 32 | FolderChangesView*.exe | True |
| 33 | FolderTimeUpdate*.exe | True |
| 34 | FullEventLogView*.exe | True |
| 35 | gacview*.exe | True |
| 36 | GDIView*.exe | True |
| 37 | HeapMemView*.exe | True |
| 38 | HTTPNetworkSniffer*.exe | True |
| 39 | IECacheView*.exe | True |
| 40 | iecv.exe | True |
| 41 | iehv.exe | True |
| 42 | iepv.exe | True |
| 43 | ImageCacheViewer*.exe | True |
| 44 | InstalledPackagesView*.exe | True |
| 45 | IPNetInfo*.exe | True |
| 46 | LastActivityView*.exe | True |
| 47 | LostMyPassword*.exe | True |
| 48 | mailpv*.exe | True |
| 49 | MozillaCacheView*.exe | True |
| 50 | MozillaHistoryView*.exe | True |
| 51 | mspass.exe | True |
| 52 | MyLastSearch*.exe | True |
| 53 | mzcv.exe | True |
| 54 | NetBScanner*.exe | True |
| 55 | NetConnectChoose*.exe | True |
| 56 | netpass*.exe | True |
| 57 | NetResView*.exe | True |
| 58 | NetRouteView*.exe | True |
| 59 | NetworkLatencyView*.exe | True |
| 60 | NetworkTrafficView*.exe | True |
| 61 | nircmd*.exe | True |
| 62 | OpenedFilesView*.exe | True |
| 63 | OperaCacheView*.exe | True |
| 64 | PasswordFox*.exe | True |
| 65 | PasswordHashesView*.exe | True |
| 66 | PingInfoView*.exe | True |
| 67 | ProcessActivityView*.exe | True |
| 68 | ProcessThreadsView*.exe | True |
| 69 | ProduKey*.exe | True |
| 70 | PstPassword*.exe | True |
| 71 | QuickSetDNS*.exe | True |
| 72 | rdpv.exe | True |
| 73 | RegDllView*.exe | True |
| 74 | RegFileExport*.exe | True |
| 75 | RegFromApp*.exe | True |
| 76 | RegHiveBackup*.exe | True |
| 77 | RegScanner*.exe | True |
| 78 | ResourcesExtract*.exe | True |
| 79 | RouterPassView*.exe | True |
| 80 | RunAsDate*.exe | True |
| 81 | RunFromProcess*.exe | True |
| 82 | SafariCacheView*.exe | True |
| 83 | SafariHistoryView*.exe | True |
| 84 | SearchMyFiles*.exe | True |
| 85 | shexview*.exe | True |
| 86 | shmnview*.exe | True |
| 87 | SimpleProgramDebugger*.exe | True |
| 88 | SiteShoter*.exe | True |
| 89 | smsniff*.exe | True |
| 90 | SniffPass*.exe | True |
| 91 | SocketSniff*.exe | True |
| 92 | SpecialFoldersView*.exe | True |
| 93 | sysexp*.exe | True |
| 94 | TaskSchedulerView*.exe | True |
| 95 | TcpLogView*.exe | True |
| 96 | TurnedOnTimesView*.exe | True |
| 97 | UninstallView*.exe | True |
| 98 | URLProtocolView*.exe | True |
| 99 | USBDeview*.exe | True |
| 100 | VaultPasswordView*.exe | True |
| 101 | volumouse*.exe | True |
| 102 | WebBrowserPassView*.exe | True |
| 103 | WebCacheImageInfo*.exe | True |
| 104 | WebCookiesSniffer*.exe | True |
| 105 | WebSiteSniffer*.exe | True |
| 106 | WhatIsHang*.exe | True |
| 107 | WhoisTD*.exe | True |
| 108 | WifiChannelMonitor*.exe | True |
| 109 | WifiInfoView*.exe | True |
| 110 | WinCrashReport*.exe | True |
| 111 | WinLogOnView*.exe | True |
| 112 | WirelessKeyView*.exe | True |
| 113 | WirelessNetView*.exe | True |
| 114 | WNetWatcher*.exe | True |