412 Commits

Author	SHA1	Message	Date
xenoscr	ee68df7f26	Put schema back to previous state and fixed non-compliant Link in At.yml	2022-09-13 23:06:42 -04:00
xenoscr	92424a40de	Implimenting requested changes from PR #251 review from @wietze.	2022-09-13 22:51:52 -04:00
xenoscr	2c3653f0c4	Fixing more file formatting issues.	2022-09-11 01:36:14 -04:00
xenoscr	654cdd2d61	Fixing file formating.	2022-09-11 01:33:36 -04:00
xenoscr	3d6a4be2a5	Fixing more formatting errors.	2022-09-11 01:23:21 -04:00
xenoscr	98813fe01b	Fixing errors found in yaml lint action.	2022-09-11 01:07:18 -04:00
xenoscr	6e253a7a38	Adding missing OperatingSystem values.	2022-09-11 00:22:36 -04:00
xenoscr	68e5795aec	Fixing Acknowledgement values.	2022-09-11 00:20:05 -04:00
xenoscr	aa1e1ea2be	Adding no defualt paths to pass schema validations	2022-09-11 00:16:59 -04:00
xenoscr	c933426c1a	Adding missing Path value.	2022-09-11 00:03:30 -04:00
xenoscr	1bd305e3a3	Adding missing Usecase values.	2022-09-10 23:53:21 -04:00
xenoscr	c24cad7868	Adding missing OperatingSystem values.	2022-09-10 23:48:38 -04:00
xenoscr	371d1cf2cc	Correcting case in Usecase key names.	2022-09-10 23:45:28 -04:00
xenoscr	a040ca3e40	Adding missing OperatingSystem values to Ieadvpack.yml	2022-09-10 23:41:38 -04:00
xenoscr	f5baac1c45	Adding missing authors	2022-09-10 23:37:10 -04:00
xenoscr	700d181c7e	Adding missing OperatingSystem key in Ilasm.yml	2022-09-10 23:30:36 -04:00
xenoscr	d585695b08	Adding missing Descriptions.	2022-09-10 23:26:10 -04:00
xenoscr	abb1034b00	Added missing description to Extexport.yml	2022-09-10 23:08:46 -04:00
xenoscr	dd58662ee9	Correcting 'UAC bypass' to 'UAC Bypass'	2022-09-10 22:58:06 -04:00
xenoscr	0ed1694bf1	Correcting 'AWL bypass' to 'AWL Bypass'	2022-09-10 22:55:32 -04:00
xenoscr	09e81d0bd1	Correcting Cmstp.yml Category value, case.	2022-09-10 22:48:08 -04:00
xenoscr	5e0ae9c976	Correcting Cmstp.yml Category value.	2022-09-10 22:46:13 -04:00
xenoscr	ce36f924fc	Removing extra --- from each yaml file	2022-09-10 22:16:47 -04:00
Ryan Stamp	8810e30f0a	Fix incorrect decodehex command syntax (#230)	2022-09-02 18:44:23 +01:00
securepeacock	68c14b894c	Update UtilityFunctions.yml (#228)	2022-09-02 18:42:59 +01:00
Oddvar Moe	68a6f0a35f	added sigma detection for pester	2022-08-24 12:32:48 +02:00
Oddvar Moe	c53a8ea06e	Adjusted comment in command	2022-08-23 15:47:17 +02:00
Oddvar Moe	fdc1b2c827	Update pester.bat with an additional example	2022-08-23 15:44:57 +02:00
Oddvar Moe	8283d8d915	Delete Dllhost.yml ... https://twitter.com/0gtweet/status/1533804788038647808	2022-06-09 10:51:40 +02:00
frack113	91350057ce	Add sigma references to CL_LoadAssembly, CLMutexVerifiers entries (#221)	2022-06-04 11:50:35 +01:00
Kostas	314f585da9	Update Hh.yml ... Added SysWoW64 Path	2022-05-24 15:29:03 -07:00
Kostas	aae794c59c	Update Hh.yml ... Fixing the full path of the hh.exe binary to C:\Windows\hh.exe	2022-05-24 14:23:18 -07:00
frack113	f85eeb748a	Add Sigma references to conhost, imewdbld, ie4uinit, ilasm, offlinescannershell and replace (#219)	2022-05-23 12:35:58 +01:00
Chris "Lopi" Spehn	36945392ca	Merge pull request #201 from wietze/new/Conhost ... Adding Conhost.exe LOLBAS	2022-05-19 10:27:10 -06:00
Chris "Lopi" Spehn	e872ce028b	Merge pull request #214 from jstnk9/master ... Added new sigma rule and references to desk.cpl	2022-05-19 10:21:21 -06:00
ManuelBerrueta	68b772a567	Updated yml/OtherMSBinaries/Sqlps.yml, used recently in a campaign shared my Microsoft Security Intelligence. Would be useful reference for Red Teamers/Offensive Security Engineers as well as Blue Teamers/Defenders who reference this open source project/library.	2022-05-19 07:12:37 -07:00
John Dwyer	90b6082f1d	Update Rdrleakdiag.yml	2022-05-19 13:30:11 +00:00
John Dwyer	e2493d8ccf	Detection Resources and Other Updates (LOLBAS-Project#84) ... https://github.com/LOLBAS-Project/LOLBAS/issues/84	2022-05-18 19:00:26 +00:00
John Dwyer	d935f096fd	Added rdrleakdiag dump ... Added yaml for rdrleakdiag process dumping capability	2022-05-18 18:58:04 +00:00
frack113	d1738b946b	Adding various Sigma references (#213) ... Co-authored-by: Wietze <wietze@users.noreply.github.com>	2022-05-17 09:18:45 +01:00
bohops	3571a7ad88	Create AccCheckConsole.yml (#187)	2022-05-15 21:55:16 +01:00
mrd0x	7c2f3231d3	Adding Dump64.exe (#182) ... Co-authored-by: mrd0x <mrd0x@example.com> Co-authored-by: Wietze <wietze@users.noreply.github.com>	2022-05-15 21:21:45 +01:00
Wietze	b333db4f91	Fixing typo (ieaframe -> ieframe)	2022-05-15 21:06:33 +01:00
akshat pradhan	79f4cbdb7f	Changed tid to T1105 for downloads (#195)	2022-05-15 20:38:24 +01:00
jstnk9	00bc9177bd	Added new sigma rule and references ... Added new sigma rule and references	2022-05-15 16:42:44 +02:00
bohops	d93539bf9b	Quick fix for syntax and removed IOC	2022-04-29 23:06:41 -04:00
cr1sp4	666e6e8645	Update Desk.yml (#210) ... Added Sigma rules.	2022-04-29 22:52:57 -04:00
Wietze	619aafbfa2	Adding extra contributor to Desk.cpl entry	2022-04-28 13:01:35 +01:00
Wietze	4a8bdf4844	Fix casing on Desk.cpl entry	2022-04-27 11:20:13 +01:00
LuxNoBu!!shit	6ed0fb9326	Create Desk.cpl (#207) ... Co-authored-by: Wietze <wietze@users.noreply.github.com>	2022-04-27 11:15:15 +01:00