delete sample-evtx dir

Browse Source

...

This commit is contained in:

Tanaka Zakku committed 2021-12-22 08:10:44 +09:00

1 parent 2e37e17300

commit 62b856efbb

503 files changed

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

sample-evtx/DeepBlueCLI/Powershell-Invoke-Obfuscation-encoding-menu.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/Powershell-Invoke-Obfuscation-many.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/Powershell-Invoke-Obfuscation-string-menu.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/disablestop-eventlog.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/eventlog-dac.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/many-events-application.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/many-events-security.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/many-events-system.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/metasploit-psexec-native-target-security.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/metasploit-psexec-native-target-system.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/metasploit-psexec-powershell-target-security.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/metasploit-psexec-powershell-target-system.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/metasploit-psexec-pwshpayload.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/mimikatz-privesc-hashdump.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/mimikatz-privilegedebug-tokenelevate-hashdump.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/new-user-security.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/password-spray.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/powersploit-security.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/powersploit-system.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/psattack-security.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/smb-password-guessing-security.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/AutomatedTestingTools/Malware/DE_timestomp_and_dll_sideloading_and_RunPersist.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/AutomatedTestingTools/Malware/rundll32_cmd_schtask.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/AutomatedTestingTools/Malware/rundll32_hollowing_wermgr_masquerading.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/AutomatedTestingTools/Malware/sideloading_injection_persistence_run_key.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/AutomatedTestingTools/Malware/sideloading_uacbypass_rundll32_injection_c2.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/AutomatedTestingTools/PanacheSysmon_vs_AtomicRedTeam01.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/AutomatedTestingTools/WinDefender_Events_1117_1116_AtomicRedTeam.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/AutomatedTestingTools/panache_sysmon_vs_EDRTestingScript.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Command and Control/DE_RDP_Tunnel_5156.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Command and Control/DE_RDP_Tunneling_4624.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Command and Control/DE_RDP_Tunneling_TerminalServices-RemoteConnectionManagerOperational_1149.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Command and Control/DE_sysmon-3-rdp-tun.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Command and Control/bits_openvpn.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Command and Control/tunna_iis_rdp_smb_tunneling_sysmon_3.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/4794_DSRM_password_change_t1098.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/ACL_ForcePwd_SPNAdd_User_Computer_Accounts.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/CA_4624_4625_LogonType2_LogonProc_chrome.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/CA_DCSync_4662.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/CA_Mimikatz_Memssp_Default_Logs_Sysmon_11.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/CA_PetiPotam_etw_rpc_efsr_5_6.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/CA_chrome_firefox_opera_4663.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/CA_hashdump_4663_4656_lsass_access.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/CA_keefarce_keepass_credump.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/CA_keepass_KeeThief_Get-KeePassDatabaseKey.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/CA_protectedstorage_5145_rpc_masterkey.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/CA_sysmon_hashdump_cmd_meterpreter.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/CA_teamviewer-dumper_sysmon_10.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/LsassSilentProcessExit_process_exit_monitor_3001_lsass.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/MSSQL_multiple_failed_logon_EventID_18456.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/Powershell_4104_MiniDumpWriteDump_Lsass.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/Sysmon13_MachineAccount_Password_Hash_Changed_via_LsarSetSecret.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/Sysmon_13_Local_Admin_Password_Changed.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/Zerologon_CVE-2020-1472_DFIR_System_NetLogon_Error_EventID_5805.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/Zerologon_VoidSec_CVE-2020-1472_4626_LT3_Anonym_follwedby_4742_DC_Anony_DC.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/babyshark_mimikatz_powershell.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/dc_applog_ntdsutil_dfir_325_326_327.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/discovery_sysmon_1_iis_pwd_and_config_discovery_appcmd.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/etw_rpc_zerologon.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/kerberos_pwd_spray_4771.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/phish_windows_credentials_powershell_scriptblockLog_4104.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/ppl_bypass_ppldump_knowdll_hijack_sysmon_security.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/remote_pwd_reset_rpc_mimikatz_postzerologon_target_DC.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/sysmon17_18_kekeo_tsssp_default_np.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/sysmon_10_11_lsass_memdump.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/sysmon_10_11_outlfank_dumpert_and_andrewspecial_memdump.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/sysmon_10_1_memdump_comsvcs_minidump.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/sysmon_10_lsass_mimikatz_sekurlsa_logonpasswords.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/sysmon_13_keylogger_directx.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/sysmon_2x10_lsass_with_different_pid_RtlCreateProcessReflection.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/sysmon_3_10_Invoke-Mimikatz_hosted_Github.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/sysmon_rdrleakdiag_lsass_dump.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/DE_104_system_log_cleared.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/DE_1102_security_log_cleared.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/DE_BYOV_Zam64_CA_Memdump_sysmon_7_10.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/DE_EventLog_Service_Crashed.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/DE_Fake_ComputerAccount_4720.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/DE_KernelDebug_and_TestSigning_ON_Security_4826.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/DE_Powershell_CLM_Disabled_Sysmon_12.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/DE_ProcessHerpaderping_Sysmon_11_10_1_7.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/DE_UAC_Disabled_Sysmon_12_13.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/DE_WinEventLogSvc_Crash_System_7036.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/DE_remote_eventlog_svc_crash_byt3bl33d3r_sysmon_17_1_3.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/DE_renamed_psexec_service_sysmon_17_18.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/DE_suspicious_remote_eventlog_svc_access_5145.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/DE_xp_cmdshell_enabled_MSSQL_EID_15457.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/DSE_bypass_BYOV_TDL_dummydriver_sysmon_6_7_13.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/Sysmon 7 Update Session Orchestrator Dll Hijack.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/Sysmon 7 dllhijack_cdpsshims_CDPSvc.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/Sysmon_10_Evasion_Suspicious_NtOpenProcess_CallTrace.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/Sysmon_12_DE_AntiForensics_MRU_DeleteKey.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/Win_4985_T1186_Process_Doppelganging.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/apt10_jjs_sideloading_prochollowing_persist_as_service_sysmon_1_7_8_13.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/de_PsScriptBlockLogging_disabled_sysmon12_13.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/de_hiding_files_via_attrib_cmdlet.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/de_portforward_netsh_rdp_sysmon_13_1.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/de_powershell_execpolicy_changed_sysmon_13.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/de_sysmon_13_VBA_Security_AccessVBOM.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/de_unmanagedpowershell_psinject_sysmon_7_8_10.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/evasion_codeinj_odzhan_conhost_sysmon_10_1.evtx

BIN

Binary file not shown.

Loaded 100 of 503 files, more files were not shown because too many files have changed in this diff. Show more