security-tools/atomic-red-team
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
6,387 Commits 47 Branches 0 Tags
remove_users_launch_daemon
Commit Graph

3 Commits

Author SHA1 Message Date
Brian Thacker 7e974e12f2 Update qakbot.bat (#1393) 
Updated qakbot recon command list as reported by DFIR Reports: https://twitter.com/TheDFIRReport/status/1361331598344478727

Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
 2021-02-18 08:52:00 -07:00
Brian Thacker d0b51ff08a T1016 qakbot addition (#1288) 
* Create qakbot.bat

* Update T1016.yaml

Recon commands believed to be associated with Qakbot reconnaissance techniques.
https://hybrid-analysis.com/sample/fcdfd33bebc7a7fe02854ecb60aa17bf0bd85d0b78cc5bc07ceb93a5116639cd/5f63d0b54f389a2d7573a8ce
https://www.virustotal.com/gui/file/fcdfd33bebc7a7fe02854ecb60aa17bf0bd85d0b78cc5bc07ceb93a5116639cd/detection

Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
 2020-11-17 19:29:55 -07:00
MrOrOneEquals1 2ee6318e8b Add Open Port Checker - T1016 (#794) 
* only show cleanup with inputs if there are inputs

* test

* Open Ports added to T1016

* Fix Accidental Change

* Fix type

* Fix underscore naming error

Co-authored-by: Carrie Roberts <clr2of8@gmail.com>
 2020-01-23 13:26:24 -07:00