c2
|
minor tweaks
|
2024-10-21 10:23:43 -04:00 |
collection
|
fpr: sequoia, osquery, cups, atops, transmission, etc
|
2024-09-23 11:07:53 -04:00 |
credentials
|
fpr: prosoft, ujust, kandji-library-manager, etc
|
2024-09-26 12:40:04 -04:00 |
discovery
|
Merge pull request #388 from tstromberg/net-events
|
2024-09-24 15:53:07 -04:00 |
evasion
|
Merge pull request #398 from tstromberg/hidden-exec2
|
2024-10-21 11:56:39 -04:00 |
execution
|
refactoring alerts to reduce noise
|
2024-10-16 14:59:43 -04:00 |
exfil
|
mark https-linux extra, minor query tuning
|
2024-10-11 09:55:04 -04:00 |
impact
|
fpr: snap, mutedeck, idea, Chrome exts
|
2024-01-18 17:15:37 -05:00 |
initial_access
|
widen query scope
|
2024-10-16 09:32:00 -04:00 |
persistence
|
fpr: alf, hidden paths, proc names, listeners, systemd
|
2024-10-17 11:44:47 -04:00 |