security-tools/blue-team-tools
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

docs: added link to leak file on VT

Browse Source
This commit is contained in:
Florian Roth
2021-08-16 10:12:35 +02:00
parent dc9bb22a00
commit f8bedfa759
4 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
rules/windows/process_creation/win_malware_conti.yml
+1
View File
@@ -6,6 +6,7 @@ date: 2021/08/09
status: experimental
references:
- https://twitter.com/vxunderground/status/1423336151860002816?s=20
- https://www.virustotal.com/gui/file/03e9b8c2e86d6db450e5eceec057d7e369ee2389b9daecaf06331a95410aa5f8/detection
logsource:
category: process_creation
product: windows
rules/windows/process_creation/win_malware_conti_7zip.yml
+1
View File
@@ -6,6 +6,7 @@ date: 2021/08/09
status: experimental
references:
- https://twitter.com/vxunderground/status/1423336151860002816?s=20
- https://www.virustotal.com/gui/file/03e9b8c2e86d6db450e5eceec057d7e369ee2389b9daecaf06331a95410aa5f8/detection
logsource:
category: process_creation
product: windows
rules/windows/process_creation/win_malware_conti_shadowcopy.yml
+1
View File
@@ -6,6 +6,7 @@ date: 2021/08/09
status: experimental
references:
- https://twitter.com/vxunderground/status/1423336151860002816?s=20
- https://www.virustotal.com/gui/file/03e9b8c2e86d6db450e5eceec057d7e369ee2389b9daecaf06331a95410aa5f8/detection
logsource:
category: process_creation
product: windows
rules/windows/process_creation/win_susp_cmd_shadowcopy_access.yml
+1
View File
@@ -6,6 +6,7 @@ date: 2021/08/09
status: experimental
references:
- https://twitter.com/vxunderground/status/1423336151860002816?s=20
- https://www.virustotal.com/gui/file/03e9b8c2e86d6db450e5eceec057d7e369ee2389b9daecaf06331a95410aa5f8/detection
logsource:
category: process_creation
product: windows