mgreen27/detectraptor issues and pull requests

#77 - Update MFT.csv

Pull Request - State: closed - Opened by mtreanor-r7 3 months ago

#76 - Update MFT.csv

Pull Request - State: closed - Opened by mtreanor-r7 3 months ago

#75 - Update MFT.csv

Pull Request - State: closed - Opened by mtreanor-r7 4 months ago

#74 - Updata yara file

Pull Request - State: closed - Opened by mgreen27 4 months ago

#73 - Update MFT.csv

Pull Request - State: closed - Opened by mtreanor-r7 4 months ago

#72 - Update MFT.csv

Pull Request - State: closed - Opened by mtreanor-r7 4 months ago

#71 - Update MFT.csv

Pull Request - State: closed - Opened by mtreanor-r7 4 months ago

#70 - Add some regex specific edits to reduce FPs

Pull Request - State: closed - Opened by mgreen27 4 months ago

#69 - Wrong/missing yara file url

Issue - State: closed - Opened by zmlilo 4 months ago - 2 comments

#68 - Add Yara file capability

Pull Request - State: closed - Opened by mgreen27 4 months ago

#67 - Update InstalledSoftware.csv

Pull Request - State: closed - Opened by mtreanor-r7 4 months ago - 3 comments

#66 - Update MFT.csv

Pull Request - State: closed - Opened by mtreanor-r7 4 months ago

#65 - Missing YARA rules

Issue - State: closed - Opened by ruppde 5 months ago - 3 comments

#64 - Update InstalledSoftware.csv

Pull Request - State: closed - Opened by Matthijsy 7 months ago

#63 - Update MFT.csv

Pull Request - State: closed - Opened by mtreanor-r7 7 months ago

#62 - Update BinaryRename.template

Pull Request - State: closed - Opened by mtreanor-r7 8 months ago

#61 - Update workflow to work only on master

Pull Request - State: closed - Opened by mgreen27 8 months ago

#60 - Pipe update

Pull Request - State: closed - Opened by mgreen27 8 months ago

#59 - Update MFT.csv

Pull Request - State: closed - Opened by mtreanor-r7 8 months ago

#58 - Windows.Detection.MFT - regex error

Issue - State: closed - Opened by ibyf0r3ns1cs 9 months ago - 1 comment

#57 - Update MFT.csv

Pull Request - State: closed - Opened by mtreanor-r7 9 months ago

#56 - Update InstalledSoftware.csv

Pull Request - State: closed - Opened by mtreanor-r7 9 months ago

#55 - Update MFT.csv

Pull Request - State: closed - Opened by mtreanor-r7 9 months ago

#54 - Update Eventlogs.csv

Pull Request - State: closed - Opened by mtreanor-r7 9 months ago

#53 - Update MFT.csv

Pull Request - State: closed - Opened by mtreanor-r7 10 months ago

#52 - Update MFT.csv

Pull Request - State: closed - Opened by mtreanor-r7 10 months ago

#51 - Does Wizzilla mean anything to you?

Issue - State: closed - Opened by 007revad 10 months ago - 1 comment

#50 - Broken Windows.Detection.Webhistory

Issue - State: open - Opened by mgreen27 11 months ago - 1 comment

#49 - Update MFT.csv

Pull Request - State: closed - Opened by mtreanor-r7 12 months ago

#48 - Update Eventlogs.csv

Pull Request - State: closed - Opened by mtreanor-r7 12 months ago

#47 - Update MFT.csv

Pull Request - State: closed - Opened by mtreanor-r7 12 months ago

#47 - Update MFT.csv

Pull Request - State: closed - Opened by mtreanor-r7 12 months ago

#46 - Update Eventlogs.csv

Pull Request - State: closed - Opened by mtreanor-r7 12 months ago

#46 - Update Eventlogs.csv

Pull Request - State: closed - Opened by mtreanor-r7 12 months ago

#45 - Update MFT.csv

Pull Request - State: closed - Opened by mtreanor-r7 about 1 year ago

#44 - Update with new EvtxHunter artifact

Pull Request - State: closed - Opened by mirwitch about 1 year ago - 1 comment

#43 - Removed major FP

Pull Request - State: closed - Opened by svch0stz about 1 year ago

#42 - Bootloaders

Pull Request - State: closed - Opened by mgreen27 about 1 year ago

#41 - Update MFT.csv

Pull Request - State: closed - Opened by svch0stz about 1 year ago

#40 - adding in Eraser Update MFT.csv

Pull Request - State: closed - Opened by mtreanor-r7 about 1 year ago

#39 - Update WebBrowsers.csv

Pull Request - State: closed - Opened by mtreanor-r7 about 1 year ago

#38 - Update MFT.csv

Pull Request - State: closed - Opened by mtreanor-r7 about 1 year ago

#37 - Update MFT.csv

Pull Request - State: closed - Opened by mtreanor-r7 about 1 year ago

#36 - Update Eventlogs.csv

Pull Request - State: closed - Opened by mtreanor-r7 about 1 year ago

#35 - Update WebBrowsers.csv

Pull Request - State: closed - Opened by mtreanor-r7 about 1 year ago

#34 - Update Applications.template

Pull Request - State: closed - Opened by mtreanor-r7 about 1 year ago

#33 - Update Eventlogs.csv

Pull Request - State: closed - Opened by mtreanor-r7 about 1 year ago

#32 - Update MFT.csv

Pull Request - State: closed - Opened by mtreanor-r7 about 1 year ago

#31 - Update MFT.csv

Pull Request - State: closed - Opened by mtreanor-r7 about 1 year ago

#30 - Update Applications.template

Pull Request - State: closed - Opened by mtreanor-r7 about 1 year ago

#29 - Iopslimit fix

Pull Request - State: closed - Opened by mgreen27 about 1 year ago

#28 - Update Amcache.yaml

Pull Request - State: closed - Opened by mtreanor-r7 about 1 year ago - 1 comment

#27 - Adding Amcache Module

Pull Request - State: closed - Opened by svch0stz about 1 year ago - 1 comment

#26 - Update Eventlogs.csv

Pull Request - State: closed - Opened by mtreanor-r7 about 1 year ago

#25 - Restrcture of mft hunts

Pull Request - State: closed - Opened by svch0stz over 1 year ago

#24 - Update MFT.yaml

Pull Request - State: closed - Opened by mtreanor-r7 over 1 year ago

#23 - Update MFT.csv

Pull Request - State: closed - Opened by mtreanor-r7 over 1 year ago

#22 - Update InstalledSoftware.csv

Pull Request - State: closed - Opened by mtreanor-r7 over 1 year ago

#21 - Update Eventlogs.csv

Pull Request - State: closed - Opened by mtreanor-r7 over 1 year ago

#20 - Update MFT.csv

Pull Request - State: closed - Opened by mtreanor-r7 over 1 year ago

#19 - Update MFT.yaml

Pull Request - State: closed - Opened by mtreanor-r7 over 1 year ago

#18 - Update InstalledSoftware.csv

Pull Request - State: closed - Opened by mtreanor-r7 over 1 year ago

#17 - Update MFT.csv

Pull Request - State: closed - Opened by mtreanor-r7 over 1 year ago

#16 - Update MFT.csv

Pull Request - State: closed - Opened by mtreanor-r7 over 1 year ago

#15 - Update Eventlogs.csv

Pull Request - State: closed - Opened by mtreanor-r7 over 1 year ago

#14 - Update PowershellPSReadline.yaml

Pull Request - State: closed - Opened by mtreanor-r7 over 1 year ago - 2 comments

#13 - Update MFT.csv

Pull Request - State: closed - Opened by mtreanor-r7 over 1 year ago

#12 - Update Eventlogs.csv

Pull Request - State: closed - Opened by mtreanor-r7 over 1 year ago

#11 - Update MFT.csv

Pull Request - State: closed - Opened by svch0stz over 1 year ago

#10 - Additional detections

Pull Request - State: closed - Opened by svch0stz over 1 year ago

#9 - Update NamedPipes.csv

Pull Request - State: closed - Opened by mtreanor-r7 over 1 year ago

#8 - additional indicators

Issue - State: closed - Opened by 0x90v1 over 1 year ago - 2 comments

#7 - Fix PowershellPSReadline and Evtx VQL by escaping regex in CSV

Pull Request - State: closed - Opened by seroam over 1 year ago

#6 - Update WebBrowsers.csv

Pull Request - State: closed - Opened by svch0stz over 1 year ago

#5 - Update MFT.csv

Pull Request - State: closed - Opened by mtreanor-r7 over 1 year ago

#4 - Update Applications.yaml

Pull Request - State: closed - Opened by mtreanor-r7 almost 2 years ago

#3 - Update MFT.yaml

Pull Request - State: closed - Opened by mtreanor-r7 almost 2 years ago

#2 - Update WebBrowsers.csv

Pull Request - State: closed - Opened by svch0stz almost 2 years ago

#1 - PSReadline detection

Pull Request - State: closed - Opened by svch0stz almost 2 years ago

GitHub / mgreen27/detectraptor issues and pull requests