yt0ng 07e411fe6b Oilrig Information gathering ...

whoami & hostname & ipconfig /all & net user /domain 2>&1 & net group /domain 2>&1 & net group "domain admins" /domain 2>&1 & net group "Exchange Trusted Subsystem" /domain 2>&1 & net accounts /domain 2>&1 & net user 2>&1 & net localgroup administrators 2>&1 & netstat -an 2>&1 & tasklist 2>&1 & sc query 2>&1 & systeminfo 2>&1 & reg query "HKEY_CURRENT_USER\Software\Microsoft\Terminal Server Client\Default" 2>&1

2018-08-15 14:29:59 +02:00

..

application

Fixes for Elasticsearch query correctness CI tests

2018-04-09 22:33:29 +02:00

apt

Oilrig Information gathering

2018-08-15 14:29:59 +02:00

linux

Adjusted rules to the new specs reg "not null" usage

2018-06-28 09:30:31 +02:00

network

Fixed ATT&CK tagging

2018-08-08 15:58:19 +02:00

proxy

Bugfix in Flash Downloader Rule

2018-06-30 23:39:38 +02:00

web

Rule: widened the CVE-2018-2894 WebLogic rule

2018-07-22 20:36:10 -06:00

windows

Fixed tag and date

2018-08-07 08:22:11 +02:00