4 matches found
sigmalite
github.com/runreveal/sigmalite sigmalite ๅ ๆไพไบ Sigma ๆฃๆตๆ ผๅผ ็่งฃๆๅจๅๆง่กๅผๆใ root@kitploit: rule, err := sigmalite.ParseRulebyte title: My example rule detection: keywords: - foo - bar selection: EventId: 1234 condition: keywords and selection if err != nil return err entry := &sigmalite.LogEntry Message:...
Zircolite
็จไบ EVTXใAuditdใSysmon for LinuxใXMLใCSV ๆ JSONL/NDJSON ๆฅๅฟ็็ฌ็ซ SIGMA ๆฃๆตๅทฅๅ ท Zircolite ๆฏไธๆฌพไฝฟ็จ Python 3 ็ผๅ็็ฌ็ซๅทฅๅ ท๏ผๅฏ่ฎฉไฝ ๅฏนไปฅไธๆฅๅฟๅบ็จ SIGMA ่งๅ๏ผ MS Windows EVTX๏ผEVTXใXML ๅ JSONL ๆ ผๅผ๏ผ Auditd ๆฅๅฟ Sysmon for Linux ๆฅๅฟ EVTXtract CSV ๅ XML ๆฅๅฟ JSON ๆฐ็ปๆฅๅฟ ไธป่ฆ็นๆง ่ชๅจๆฅๅฟ็ฑปๅๆฃๆต ๏ผไฝฟ็จ้ญๆฐใๅ ๅฎนๅๆๅๅบไบๆญฃๅ่กจ่พพๅผ็ๅ้ๆบๅถ่ชๅจ่ฏๅซๆฅๅฟๆ ผๅผๅๆถ้ดๆณๅญๆฎตโโๅจๅคงๅคๆฐๆ ๅตไธๆ ้ๆๅฎๆ ผๅผๅๆฐใ...
chainsaw
ๅฟซ้ๆ็ดขๅ็ฉ็ Windows ๅ่ฏ็่ฟน Chainsaw ๆไพๅผบๅคง็โ็ฌฌไธๅๅบโ่ฝๅ๏ผๅฏๅฟซ้่ฏๅซ Windows ๅ่ฏ็่ฟน๏ผๅฆไบไปถๆฅๅฟๅ MFT ๆไปถ๏ผไธญ็ๅจ่ใChainsaw ๆไพไบไธ็ง้็จไธๅฟซ้็ๆนๆณ๏ผ้่ฟๅ ณ้ฎ่ฏๆ็ดขไบไปถๆฅๅฟ๏ผๅนถๅฉ็จๅ ็ฝฎ็ Sigma ๆฃๆต่งๅๆฏๆไปฅๅ่ชๅฎไน Chainsaw ๆฃๆต่งๅๆฅ่ฏๅซๅจ่ใ ๅ่ฝ็นๆง ๐ฏ ไฝฟ็จ Sigma ๆฃๆต่งๅๅ่ชๅฎไน Chainsaw ๆฃๆต่งๅ็ฉ็ๅจ่ ๐ ้่ฟๅญ็ฌฆไธฒๅน้ ๅๆญฃๅ่กจ่พพๅผๆจกๅผๆ็ดขๅๆๅๅ่ฏ็่ฟน ๐ ้่ฟๅๆ Shimcache ็่ฟนๅนถ็จ Amcache ๆฐๆฎไธฐๅฏๅฎไปฌๆฅๅๅปบๆง่กๆถ้ด็บฟ ๐ก ๅๆ SRUM ๆฐๆฎๅบๅนถๆไพ็ธๅ ณ่ง่งฃ...
cve-2023-23397-purple-team
CVE-2023-23397 โ ็ดซ้๏ผๅฉ็จ + ๆฃๆต ้ๅฏนๅไธ Outlook NTLM ๆณ้ฒๆผๆด๏ผCVE-2023-23397๏ผ็้กน็ฎไธคๅคง้จๅ๏ผ ็บข้๏ผๅทฒๅฎๆ๏ผ๏ผ ้ๅฏน Windows 10 ๅๅฎณ่ ่ๆๆบ็้้ฑผๆ้ + CVE-2023-23397 ๆผๆดๅฉ็จ๏ผๅฎๆดๆฅๅ่ง FINALPROJECTREPORT.pdf๏ผๆผ็คบ่ง้ข่ง FINALDEMOVIDEO.mp4๏ผๅนป็ฏ็่ง Presentation.pptxใๆ้่ๆฌ๏ผsendmaliciousemail.pyใmaliciousemailurl.py๏ผๅ้้ฑผ่ฏฑ้ฅต้กต้ข๏ผindex.html๏ผไธๅนถ้ไธไพๅ่ใ ่้๏ผ่ฟ่กไธญ๏ผ๏ผ...