Commits

Branch selector

 master

User selector

All users

Datepicker

All time

Commit History

Commits on Oct 21, 2019

• Metasploit ShikataGaNai signature

  Show description for 563cb2c
  

  Florian Roth

  committed
  563cb2c

• changed Neuron2 loader rule

  

  Florian Roth

  committed
  fd13d0b

• Winnti MSSQL server backdoor IOCs

  

  Florian Roth

  committed
  3018b3d

• Neuron2 Loader

  

  Florian Roth

  committed
  b66c22e

Commits on Oct 20, 2019

• docs: added reference links

  

  Florian Roth

  committed
  f4e97d1

• file-type-sigantures update

  

  Florian Roth

  committed
  704a5d9

Commits on Oct 19, 2019

• Renamed Python TCP reverse connect shell

  

  Florian Roth

  committed
  c0ea5e3

• Suspicious WER files

  

  Florian Roth

  committed
  423865b

• Merge pull request Neo23x0#79 from jbeley/master

  Show description for bbed671
  Neo23x0

  authored
  bbed671

• fix: wrong escape char

  Neo23x0

  authored
  d87f34c

• fix: bugfix in rule - missing escape char

  Neo23x0

  authored
  f86be3a

• Improved / simplified rule

  Neo23x0

  authored
  9aee9fb

• creation of Reverse_Connect_TCP_PTY_Shell rule

  

  Jeff Beley

  committed
  0479ade

Commits on Oct 17, 2019

• Operation Ghost Dukes Hash IOCs

  

  Florian Roth

  committed
  819c709

Commits on Oct 15, 2019

• APT41 DEADEYE hashes

  

  Florian Roth

  committed
  029c891

Commits on Oct 14, 2019

• Winnti IOCs

  

  Florian Roth

  committed
  93e039f

Commits on Oct 13, 2019

• fix: FP with Wilted Tulip rule

  

  Florian Roth

  committed
  928418f

• new filename IOCs

  

  Florian Roth

  committed
  afed2dc

• fix: filename IOC prone to FPs

  

  Florian Roth

  committed
  c33ff16

Commits on Oct 4, 2019

• fix: fixed Trickbot rule set - missing pe

  

  Florian Roth

  committed
  6b9ee44

• Trickbot YARA rules

  

  Florian Roth

  committed
  cca4006

• Emotet JS dropper

  

  Florian Roth

  committed
  e37620f

• Suspicious PDB Path keywords

  

  Florian Roth

  committed
  75460e4

• docs: changed descriptions

  

  Florian Roth

  committed
  7d08d01

Commits on Sep 30, 2019

• OSPPSVC Signature Anomaly

  

  Florian Roth

  committed
  a567b49

• fixed Codoso FP

  

  Florian Roth

  committed
  f3d77c8

• Sofacy IOCs

  

  Florian Roth

  committed
  7cc37f5

Commits on Sep 25, 2019

• score updated for URL persistence rules

  

  Florian Roth

  committed
  a9b693b

• fix: reworked fucked up hatman rules

  

  Florian Roth

  committed
  799d083

• URL persistence by Nick

  

  Florian Roth

  committed
  5a5bb4b

• rule improvements

  

  Florian Roth

  committed
  2f966be

• APT3 Bemstour

  

  Florian Roth

  committed
  3d21b6a

Commits on Aug 29, 2019

• fix: directories lead to FPs

  

  Florian Roth

  committed
  b3b0e19

• ATM malware XFSCashNCR by Frank Boldewin

  Show description for 59ad8c3
  

  Florian Roth

  committed
  59ad8c3

• FP reduction

  

  Florian Roth

  committed
  5f29cd8

Pagination

PreviousNext