ION28/BLUESPAWN issues and pull requests

#100 - Incorrect log levels not handled correctly

Issue - State: closed - Opened by CalvinKrist about 5 years ago
Labels: type/bug, difficulty/easy, module/logging, lang/c++

#100 - Incorrect log levels not handled correctly

Issue - State: closed - Opened by CalvinKrist about 5 years ago
Labels: type/bug, difficulty/easy, module/logging, lang/c++

#99 - Local server merge to develop

Pull Request - State: closed - Opened by CalvinKrist about 5 years ago - 1 comment

#98 - C server to local_server

Pull Request - State: closed - Opened by CalvinKrist about 5 years ago

#97 - Simple notification from gRPC server to clients when malware is found

Issue - State: closed - Opened by CalvinKrist about 5 years ago
Labels: type/enhancement, priority/high, difficulty/easy, lang/c++, lang/c#

#97 - Simple notification from gRPC server to clients when malware is found

Issue - State: closed - Opened by CalvinKrist about 5 years ago
Labels: type/enhancement, priority/high, difficulty/easy, lang/c++, lang/c#

#96 - Implement a LocalServerSink to send Reactions to Server

Issue - State: closed - Opened by CalvinKrist about 5 years ago
Labels: type/enhancement, priority/high, module/logging, lang/c++

#96 - Implement a LocalServerSink to send Reactions to Server

Issue - State: closed - Opened by CalvinKrist about 5 years ago
Labels: type/enhancement, priority/high, module/logging, lang/c++

#95 - Design and compile proto files for Reaction obejcts and information

Issue - State: closed - Opened by CalvinKrist about 5 years ago
Labels: type/enhancement, priority/high, difficulty/easy, module/logging, lang/c++, lang/c#

#94 - Create C# gRPC Server

Issue - State: closed - Opened by CalvinKrist about 5 years ago
Labels: type/enhancement, priority/high, difficulty/easy, lang/c#

#94 - Create C# gRPC Server

Issue - State: closed - Opened by CalvinKrist about 5 years ago
Labels: type/enhancement, priority/high, difficulty/easy, lang/c#

#93 - Rework reactions framework; Remove hunt T9999

Pull Request - State: closed - Opened by Jack-McDowell about 5 years ago

#92 - Merge develop into master for v0.3.1 release

Pull Request - State: closed - Opened by ION28 about 5 years ago

#91 - Fix T1138 to properly detect Application Shimming Installation

Pull Request - State: closed - Opened by ION28 about 5 years ago

#91 - Fix T1138 to properly detect Application Shimming Installation

Pull Request - State: closed - Opened by ION28 about 5 years ago

#90 - Code Execution and Lateral Movement Detection Opportunities

Issue - State: closed - Opened by ION28 about 5 years ago
Labels: type/enhancement, module/services, module/processes, module/event-logs

#89 - Research integration of Real-time AD detections

Issue - State: closed - Opened by ION28 about 5 years ago - 5 comments
Labels: type/enhancement, priority/low, difficulty/hard, module/event-logs

#89 - Research integration of Real-time AD detections

Issue - State: closed - Opened by ION28 about 5 years ago - 5 comments
Labels: type/enhancement, priority/low, difficulty/hard, module/event-logs

#88 - Fix bug in output for Registry Key identified

Issue - State: closed - Opened by ION28 about 5 years ago - 1 comment
Labels: type/bug, module/configuration, priority/high, module/logging

#88 - Fix bug in output for Registry Key identified

Issue - State: closed - Opened by ION28 about 5 years ago - 1 comment
Labels: type/bug, module/configuration, priority/high, module/logging

#87 - Add LOG_ALERT macro

Issue - State: closed - Opened by ION28 about 5 years ago
Labels: type/enhancement, difficulty/easy, module/logging

#87 - Add LOG_ALERT macro

Issue - State: closed - Opened by ION28 about 5 years ago
Labels: type/enhancement, difficulty/easy, module/logging

#86 - Add Cloud Metrics Reporting

Issue - State: closed - Opened by ION28 about 5 years ago
Labels: type/enhancement, module/logging

#86 - Add Cloud Metrics Reporting

Issue - State: closed - Opened by ION28 about 5 years ago
Labels: type/enhancement, module/logging

#85 - Add support for regex value checks in registry

Issue - State: closed - Opened by ION28 about 5 years ago
Labels: type/enhancement, module/configuration, priority/low

#85 - Add support for regex value checks in registry

Issue - State: closed - Opened by ION28 about 5 years ago
Labels: type/enhancement, module/configuration, priority/low

#84 - Automatically run Hunts at lower aggressiveness level if Hunt does not support higher aggressiveness level

Issue - State: closed - Opened by ION28 about 5 years ago
Labels: type/bug, priority/high, difficulty/easy, lang/c++

#83 - Merge bugfix from Develop to Master for Alpha Release #3

Pull Request - State: closed - Opened by ION28 about 5 years ago

#83 - Merge bugfix from Develop to Master for Alpha Release #3

Pull Request - State: closed - Opened by ION28 about 5 years ago

#82 - Clean up main code for Release, Fix linking for Release builds

Pull Request - State: closed - Opened by ION28 about 5 years ago

#82 - Clean up main code for Release, Fix linking for Release builds

Pull Request - State: closed - Opened by ION28 about 5 years ago

#81 - Update master

Pull Request - State: closed - Opened by jnmcd about 5 years ago

#81 - Update master

Pull Request - State: closed - Opened by jnmcd about 5 years ago

#80 - Registry

Pull Request - State: closed - Opened by jnmcd about 5 years ago

#79 - Run Detection Testing Against Atomic Red Team

Issue - State: closed - Opened by ION28 about 5 years ago - 5 comments
Labels: type/enhancement, priority/low, difficulty/hard

#78 - Research Micropatching for Common Vulns

Issue - State: closed - Opened by ION28 about 5 years ago
Labels: type/enhancement, priority/low

#78 - Research Micropatching for Common Vulns

Issue - State: closed - Opened by ION28 about 5 years ago
Labels: type/enhancement, priority/low

#77 - Logging: Network output Sink

Issue - State: closed - Opened by ION28 about 5 years ago - 1 comment
Labels: type/enhancement, difficulty/hard, module/logging

#76 - Logging: File output Sink

Issue - State: closed - Opened by ION28 about 5 years ago - 1 comment
Labels: type/enhancement, priority/high, difficulty/easy, module/logging, lang/c++

#75 - Logging: Add XML output capability

Issue - State: closed - Opened by ION28 about 5 years ago
Labels: type/enhancement, module/logging

#75 - Logging: Add XML output capability

Issue - State: closed - Opened by ION28 about 5 years ago
Labels: type/enhancement, module/logging

#74 - Add JSON output capability

Issue - State: closed - Opened by ION28 about 5 years ago
Labels: type/enhancement, module/logging

#74 - Add JSON output capability

Issue - State: closed - Opened by ION28 about 5 years ago
Labels: type/enhancement, module/logging

#73 - Add more functions to collectinfo / host enum for situational awareness

Issue - State: closed - Opened by ION28 about 5 years ago
Labels: type/enhancement, priority/low

#73 - Add more functions to collectinfo / host enum for situational awareness

Issue - State: closed - Opened by ION28 about 5 years ago
Labels: type/enhancement, priority/low

#72 - T1055, T1093, T1186 - Implement Process Related Hunt Techniques

Issue - State: closed - Opened by ION28 about 5 years ago
Labels: type/enhancement, module/processes, priority/low, difficulty/hard, lang/c++

#71 - Audit and Enforce Computer Settings against a STIG

Issue - State: closed - Opened by ION28 about 5 years ago - 1 comment
Labels: type/enhancement

#70 - Small fixes for Jake to make

Issue - State: closed - Opened by ION28 about 5 years ago
Labels: type/bug

#69 - Stop committing to master

Pull Request - State: closed - Opened by jnmcd about 5 years ago

#68 - Create BLUESPAWN Windows Service for Monitor

Issue - State: closed - Opened by ION28 about 5 years ago - 1 comment
Labels: type/enhancement, priority/low, difficulty/hard

#67 - Global HuntRegister Record Framework

Issue - State: closed - Opened by ION28 about 5 years ago - 1 comment
Labels: type/bug, type/enhancement, difficulty/hard

#66 - Add CollectInfo option to command line

Issue - State: closed - Opened by ION28 about 5 years ago
Labels: type/bug, type/enhancement, difficulty/easy

#65 - Merge restructure back into master

Pull Request - State: closed - Opened by ION28 about 5 years ago

#64 - Move restructure into master

Pull Request - State: closed - Opened by ION28 about 5 years ago

#64 - Move restructure into master

Pull Request - State: closed - Opened by ION28 about 5 years ago

#63 - Merge major restructure into Master

Pull Request - State: closed - Opened by ION28 about 5 years ago

#63 - Merge major restructure into Master

Pull Request - State: closed - Opened by ION28 about 5 years ago

#62 - Merge master into restructure to keep alignment

Pull Request - State: closed - Opened by ION28 about 5 years ago
Labels: type/bug

#61 - Subscribe to an Event

Issue - State: closed - Opened by ION28 about 5 years ago
Labels: type/enhancement, priority/high, difficulty/hard, module/event-logs, lang/c++

#60 - Targeting Windows XP/Server 2003

Issue - State: closed - Opened by ION28 about 5 years ago - 3 comments
Labels: type/bug

#60 - Targeting Windows XP/Server 2003

Issue - State: closed - Opened by ION28 about 5 years ago - 3 comments
Labels: type/bug

#59 - Create 1 good example hunt with new class structure

Issue - State: closed - Opened by ION28 about 5 years ago - 1 comment
Labels: type/enhancement, module/processes, priority/high, difficulty/easy

#59 - Create 1 good example hunt with new class structure

Issue - State: closed - Opened by ION28 about 5 years ago - 1 comment
Labels: type/enhancement, module/processes, priority/high, difficulty/easy

#58 - Recreate all old detections into new BLUESPAWN setup

Issue - State: closed - Opened by ION28 about 5 years ago
Labels: type/bug, module/configuration, priority/high, module/file-system, difficulty/easy

#58 - Recreate all old detections into new BLUESPAWN setup

Issue - State: closed - Opened by ION28 about 5 years ago
Labels: type/bug, module/configuration, priority/high, module/file-system, difficulty/easy

#57 - Finish restructure and create vs project flies for redesign repo

Issue - State: closed - Opened by ION28 about 5 years ago - 1 comment
Labels: priority/high, difficulty/easy

#56 - Update License

Issue - State: closed - Opened by ION28 about 5 years ago
Labels: priority/high, difficulty/easy

#55 - VT Integration for questionable samples

Issue - State: closed - Opened by ION28 about 5 years ago
Labels: type/enhancement, module/file-system, difficulty/easy

#55 - VT Integration for questionable samples

Issue - State: closed - Opened by ION28 about 5 years ago
Labels: type/enhancement, module/file-system, difficulty/easy

#54 - T1070 Indicator Removal on Host

Issue - State: closed - Opened by ION28 about 5 years ago
Labels: type/enhancement, priority/high, difficulty/easy, module/event-logs, lang/c++

#54 - T1070 Indicator Removal on Host

Issue - State: closed - Opened by ION28 about 5 years ago
Labels: type/enhancement, priority/high, difficulty/easy, module/event-logs, lang/c++

#53 - T1099 Timestomp

Issue - State: closed - Opened by ION28 about 5 years ago - 1 comment
Labels: type/enhancement, priority/high, in progress, difficulty/easy, module/event-logs, lang/c++

#53 - T1099 Timestomp

Issue - State: closed - Opened by ION28 about 5 years ago - 1 comment
Labels: type/enhancement, priority/high, in progress, difficulty/easy, module/event-logs, lang/c++

#52 - T1098 Account Manipulation

Issue - State: closed - Opened by ION28 about 5 years ago - 3 comments
Labels: type/enhancement, priority/high, difficulty/easy, module/event-logs, lang/c++

#52 - T1098 Account Manipulation

Issue - State: closed - Opened by ION28 about 5 years ago - 3 comments
Labels: type/enhancement, priority/high, difficulty/easy, module/event-logs, lang/c++

#51 - T1136 Create Account

Issue - State: closed - Opened by ION28 about 5 years ago - 1 comment
Labels: type/enhancement, priority/high, difficulty/easy, module/event-logs, lang/c++

#50 - T1197 BITS Jobs

Issue - State: closed - Opened by ION28 about 5 years ago - 1 comment
Labels: type/enhancement, priority/high, difficulty/easy, module/event-logs, lang/c++

#49 - Create Event Log Parsing Base

Issue - State: closed - Opened by ION28 about 5 years ago - 1 comment
Labels: type/enhancement, in progress, difficulty/easy, module/event-logs

#49 - Create Event Log Parsing Base

Issue - State: closed - Opened by ION28 about 5 years ago - 1 comment
Labels: type/enhancement, in progress, difficulty/easy, module/event-logs

#48 - Suspicious execution process detection

Issue - State: closed - Opened by ION28 about 5 years ago
Labels: type/enhancement, module/processes

#47 - Execution of detection opportunity

Issue - State: closed - Opened by ION28 about 5 years ago
Labels: type/enhancement, module/processes

#47 - Execution of detection opportunity

Issue - State: closed - Opened by ION28 about 5 years ago
Labels: type/enhancement, module/processes

#46 - T1036 Masquerading processes detection

Issue - State: closed - Opened by ION28 about 5 years ago - 1 comment
Labels: type/enhancement, module/processes, module/file-system, difficulty/hard

#46 - T1036 Masquerading processes detection

Issue - State: closed - Opened by ION28 about 5 years ago - 1 comment
Labels: type/enhancement, module/processes, module/file-system, difficulty/hard

#45 - Look into YARA integration for File System Module

Issue - State: closed - Opened by ION28 about 5 years ago - 2 comments
Labels: type/enhancement, priority/low, in progress, module/file-system, difficulty/easy

#44 - Create ETW Base

Issue - State: closed - Opened by ION28 about 5 years ago - 5 comments
Labels: type/enhancement, priority/low, difficulty/hard, lang/c++

#43 - Implement Registry Key monitoring

Issue - State: closed - Opened by ION28 about 5 years ago
Labels: type/enhancement, module/configuration, priority/low, difficulty/hard, lang/c++

#43 - Implement Registry Key monitoring

Issue - State: closed - Opened by ION28 about 5 years ago
Labels: type/enhancement, module/configuration, priority/low, difficulty/hard, lang/c++

#42 - Create File System Minifilter Driver Base

Issue - State: closed - Opened by ION28 about 5 years ago
Labels: type/enhancement, module/file-system, difficulty/hard

#41 - Create Processes Base

Issue - State: closed - Opened by ION28 about 5 years ago - 5 comments
Labels: type/enhancement, module/processes, priority/high, in progress, difficulty/hard

#41 - Create Processes Base

Issue - State: closed - Opened by ION28 about 5 years ago - 5 comments
Labels: type/enhancement, module/processes, priority/high, in progress, difficulty/hard

#40 - Check Process Memory Image against disk

Issue - State: closed - Opened by ION28 about 5 years ago - 3 comments
Labels: type/enhancement, module/processes, in progress, module/file-system

#39 - Updates to T1100 - web shell detect on output

Issue - State: closed - Opened by ION28 about 5 years ago
Labels: type/enhancement, priority/low, module/file-system, difficulty/easy, lang/c++

#38 - Advanced detection opportunity for T1100 - web shells

Issue - State: closed - Opened by ION28 about 5 years ago
Labels: type/enhancement, module/processes, priority/low, difficulty/hard

#37 - Create skeleton for kernel driver

Issue - State: closed - Opened by ION28 about 5 years ago - 1 comment
Labels: type/enhancement, priority/high, difficulty/hard

#37 - Create skeleton for kernel driver

Issue - State: closed - Opened by ION28 about 5 years ago - 1 comment
Labels: type/enhancement, priority/high, difficulty/hard

#36 - Investigate subscribing to PsSetCreateProcessNotifyRoutine

Issue - State: closed - Opened by ION28 over 5 years ago
Labels: type/enhancement, module/processes, difficulty/hard

#36 - Investigate subscribing to PsSetCreateProcessNotifyRoutine

Issue - State: closed - Opened by ION28 over 5 years ago
Labels: type/enhancement, module/processes, difficulty/hard

#35 - Add Planned Techniques to ATT&CK Map

Issue - State: closed - Opened by ION28 over 5 years ago
Labels: type/enhancement, difficulty/easy

#35 - Add Planned Techniques to ATT&CK Map

Issue - State: closed - Opened by ION28 over 5 years ago
Labels: type/enhancement, difficulty/easy

GitHub / ION28/BLUESPAWN issues and pull requests