CybercentreCanada/Multidecoder issues and pull requests

#111 - Filter more domain false positives

Pull Request - State: closed - Opened by cccs-jh about 1 month ago

#110 - Xortool

Pull Request - State: closed - Opened by cccs-jh about 1 month ago

#109 - Stripping quotes in get_pwsh_cmd

Pull Request - State: closed - Opened by gdesmar about 2 months ago

#108 - Stripping quotes in get_pwsh_cmd

Pull Request - State: closed - Opened by gdesmar about 2 months ago

#107 - Improve find_cmd_strings

Pull Request - State: closed - Opened by cccs-jh about 2 months ago

#106 - Multidecoder is no longer in alpha

Pull Request - State: closed - Opened by cccs-jh 2 months ago

#105 - Filter more domain false positives

Pull Request - State: closed - Opened by cccs-jh 2 months ago

#104 - Switch from black to Ruff's inbuilt formatter

Pull Request - State: closed - Opened by cccs-jh 2 months ago

#103 - Prevent function names from being flagged as domains

Pull Request - State: closed - Opened by cccs-jh 3 months ago

#102 - Removing switch to avoid get_keywords

Pull Request - State: closed - Opened by cccs-kevin 5 months ago

#101 - Update/build registry [dev]

Pull Request - State: closed - Opened by cccs-kevin 5 months ago

#100 - Update/keyword

Pull Request - State: closed - Opened by cccs-kevin 5 months ago

#99 - Update/keyword [dev]

Pull Request - State: closed - Opened by cccs-kevin 5 months ago

#98 - Add decoders for hexadecimal encoding separated with whitespace or co…

Pull Request - State: closed - Opened by cccs-jh 6 months ago

#97 - Network fpos

Pull Request - State: closed - Opened by cccs-jh 6 months ago

#96 - Ignore pascal string check if the string is already in text and not data

Pull Request - State: closed - Opened by cccs-jh 6 months ago

#95 - Add support for both single and double quotes in base64 functions

Pull Request - State: closed - Opened by cccs-jh 6 months ago

#94 - Bugfixes

Pull Request - State: closed - Opened by cccs-jh 7 months ago

#93 - Generic reverse function

Pull Request - State: closed - Opened by cccs-jh 7 months ago

#92 - Fix off by one error

Pull Request - State: closed - Opened by cccs-jh 7 months ago

#91 - Fix PE data argument

Pull Request - State: closed - Opened by cccs-jh 7 months ago

#90 - Provide default to max in case there are no PE sections

Pull Request - State: closed - Opened by cccs-jh 7 months ago

#89 - Split finding the end of a PE file from finding a pe file.

Pull Request - State: closed - Opened by cccs-jh 8 months ago

#88 - Check that there is enough file left before attempting to read e_elfanew

Pull Request - State: closed - Opened by cccs-jh 8 months ago

#87 - Ensure that cmd is followed by a non-command character

Pull Request - State: closed - Opened by cccs-jh 8 months ago

#86 - Eliminate some ip address false positives

Pull Request - State: closed - Opened by cccs-jh 8 months ago

#85 - Prevent url from ending with ;

Pull Request - State: closed - Opened by cccs-jh 8 months ago

#84 - Replace DOS string check with e_elfanew check for PE search

Pull Request - State: closed - Opened by cccs-jh 8 months ago

#83 - Hack to prevent urls from matching past the end of an external context

Pull Request - State: closed - Opened by cccs-jh 8 months ago

#82 - Prevent false positives in windows paths

Pull Request - State: closed - Opened by cccs-jh 9 months ago

#81 - Catch errors caused by large ints in chr() and unicode surrogates

Pull Request - State: closed - Opened by cccs-jh 10 months ago

#80 - Improve port regex and validate port

Pull Request - State: closed - Opened by cccs-jh 10 months ago

#79 - Tweaking CMD_RE; Adding cmd binary string massage; Added test

Pull Request - State: closed - Opened by cccs-kevin 12 months ago

#78 - Update/cmd massage [dev]

Pull Request - State: closed - Opened by cccs-kevin 12 months ago

#77 - Moving xor helper functions to own modules

Pull Request - State: closed - Opened by cccs-kevin 12 months ago

#76 - Update/xor [dev]

Pull Request - State: closed - Opened by cccs-kevin 12 months ago

#75 - Revert "Update/stoq neuter [dev]"

Pull Request - State: closed - Opened by cccs-kevin 12 months ago

#74 - Adding neutered IOC detection and normalization method, inspired by Stoq

Pull Request - State: closed - Opened by cccs-kevin 12 months ago - 2 comments
Labels: stoq

#73 - Update/stoq neuter [dev]

Pull Request - State: closed - Opened by cccs-kevin 12 months ago

#72 - Improve Hex blob extraction in MultiDecoder

Pull Request - State: closed - Opened by cccs-kevin 12 months ago
Labels: quickscope

#71 - Update/quickscope hex [dev]

Pull Request - State: closed - Opened by cccs-kevin 12 months ago

#70 - Add tests for combinations of shell commands

Pull Request - State: closed - Opened by cccs-kevin about 1 year ago

#69 - Update/combo [dev]

Pull Request - State: closed - Opened by cccs-kevin about 1 year ago

#68 - Adding test pipline

Pull Request - State: closed - Opened by cccs-kevin about 1 year ago

#67 - Update/test pipline [dev]

Pull Request - State: closed - Opened by cccs-kevin about 1 year ago

#66 - Update/dynamic ps1

Pull Request - State: closed - Opened by cccs-kevin about 1 year ago

#65 - Update/dynamic ps1 [dev]

Pull Request - State: closed - Opened by cccs-kevin about 1 year ago

#64 - Add find_atob method to decode javascript atob calls

Pull Request - State: closed - Opened by cccs-jh about 1 year ago

#63 - Adding PyPI badge

Pull Request - State: closed - Opened by cccs-kevin about 1 year ago

#62 - Update/badge [dev]

Pull Request - State: closed - Opened by cccs-kevin about 1 year ago

#61 - Document parse_url better and make pad_base64 a public function

Pull Request - State: closed - Opened by cccs-jh about 1 year ago

#60 - Depricate query (#59)

Pull Request - State: closed - Opened by cccs-jh about 1 year ago

#59 - Depricate query

Pull Request - State: closed - Opened by cccs-jh about 1 year ago

#58 - Multidecoder 1.0.0

Pull Request - State: closed - Opened by cccs-jh about 1 year ago

#57 - Add MANIFEST.in to fix package data when installing from github

Pull Request - State: closed - Opened by cccs-jh about 1 year ago

#56 - Improve url regex

Pull Request - State: closed - Opened by cccs-jh about 1 year ago

#55 - More node

Pull Request - State: closed - Opened by cccs-jh about 1 year ago

#54 - Top level domains

Pull Request - State: closed - Opened by cccs-jh over 1 year ago

#53 - Unescape

Pull Request - State: closed - Opened by cccs-jh over 1 year ago

#52 - Handle encoded commands wrapped in quotations

Pull Request - State: closed - Opened by cccs-kevin over 1 year ago