All pull requests

Pull requests

• Add files via upload

  #513·CaptanMoss opened Dec 24, 2021·

  ·

• Update TTP

  #512·D-wit opened Nov 19, 2021·

  ·

• Need Information

  #507·vivek2040 opened Sep 24, 2021·

  ·

• make some android signatures work

  #478·qux-bbb opened Jul 28, 2020·

  ·

• Update network_http.py

  #475·qux-bbb opened Jul 4, 2020·

  ·

• Add signature for reg.exe called from command shell

  #474·car062636 opened Apr 29, 2020·

  ·

• create a separate signature just for COM_Hijacking

  #465·keizn77 opened Dec 6, 2019·

  ·

• add signature network/check_against_urlhaus.py

  #459·Clevero opened Oct 19, 2019·

  ·

• Memdump_urls.py use cwd whitelist

  #457·acd62081 opened Aug 3, 2019·

  ·

• Add PowerPoint and Publisher to sleep signature whitelist

  #456·michaelweiser opened Jul 31, 2019·

  ·

• Update appinit.py

  #453·Yanaili opened Jul 8, 2019·

  ·

• Regex fix

  #452·Yanaili opened Jul 4, 2019·

  ·

• fix some signature error

  #450·qux-bbb opened May 31, 2019·

  ·

• Verify if there is an initial process from target

  #441·RicoVZ opened Feb 8, 2019Contributor·

  ·

• Update antivirus_irma.py

  #440·r00t0vi4 opened Jan 29, 2019·

  ·

• Fix martian sig

  #439·jdval opened Nov 20, 2018·

  ·

• Update firewall sig and remove outdated sigs

  #438·seanthegeek opened Oct 31, 2018·

  ·

• Minor signature fixes and additions

  #434·Brae opened Aug 27, 2018·

  ·
  1

• Add in Dosfuscation Signature

  #432·kevross33 opened Jul 31, 2018Contributor·

  ·
  3

• Add in signature for ATM malware

  #430·kevross33 opened Jul 28, 2018Contributor·

  ·
  1

• Update cryptomining command

  #429·kevross33 opened Jul 27, 2018Contributor·

  ·

• Add in a few windows utility sigs

  #428·kevross33 opened Jul 27, 2018Contributor·

  ·

• Add in sig to detect suspicious regsvr bypasses

  #425·kevross33 opened Jul 16, 2018Contributor·

  ·

• Remove non-child in createthread sig

  #424·kevross33 opened Jul 3, 2018Contributor·

  ·

• Remove non-child injection reference memory manipulate

  #423·kevross33 opened Jul 3, 2018Contributor·

  ·