delete sample-evtx dir

Browse Source

...

This commit is contained in:

Tanaka Zakku

2021-12-22 08:10:44 +09:00

parent 2e37e17300

commit 62b856efbb

503 changed files with 0 additions and 0 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

sample-evtx/DeepBlueCLI/Powershell-Invoke-Obfuscation-encoding-menu.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/Powershell-Invoke-Obfuscation-many.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/Powershell-Invoke-Obfuscation-string-menu.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/disablestop-eventlog.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/eventlog-dac.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/many-events-application.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/many-events-security.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/many-events-system.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/metasploit-psexec-native-target-security.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/metasploit-psexec-native-target-system.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/metasploit-psexec-powershell-target-security.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/metasploit-psexec-powershell-target-system.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/metasploit-psexec-pwshpayload.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/mimikatz-privesc-hashdump.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/mimikatz-privilegedebug-tokenelevate-hashdump.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/new-user-security.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/password-spray.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/powersploit-security.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/powersploit-system.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/psattack-security.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/smb-password-guessing-security.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/AutomatedTestingTools/Malware/DE_timestomp_and_dll_sideloading_and_RunPersist.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/AutomatedTestingTools/Malware/rundll32_cmd_schtask.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/AutomatedTestingTools/Malware/rundll32_hollowing_wermgr_masquerading.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/AutomatedTestingTools/Malware/sideloading_injection_persistence_run_key.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/AutomatedTestingTools/Malware/sideloading_uacbypass_rundll32_injection_c2.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/AutomatedTestingTools/PanacheSysmon_vs_AtomicRedTeam01.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/AutomatedTestingTools/WinDefender_Events_1117_1116_AtomicRedTeam.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/AutomatedTestingTools/panache_sysmon_vs_EDRTestingScript.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Command and Control/DE_RDP_Tunnel_5156.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Command and Control/DE_RDP_Tunneling_4624.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Command and Control/DE_RDP_Tunneling_TerminalServices-RemoteConnectionManagerOperational_1149.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Command and Control/DE_sysmon-3-rdp-tun.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Command and Control/bits_openvpn.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Command and Control/tunna_iis_rdp_smb_tunneling_sysmon_3.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/4794_DSRM_password_change_t1098.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/ACL_ForcePwd_SPNAdd_User_Computer_Accounts.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/CA_4624_4625_LogonType2_LogonProc_chrome.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/CA_DCSync_4662.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/CA_Mimikatz_Memssp_Default_Logs_Sysmon_11.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/CA_PetiPotam_etw_rpc_efsr_5_6.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/CA_chrome_firefox_opera_4663.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/CA_hashdump_4663_4656_lsass_access.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/CA_keefarce_keepass_credump.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/CA_keepass_KeeThief_Get-KeePassDatabaseKey.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/CA_protectedstorage_5145_rpc_masterkey.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/CA_sysmon_hashdump_cmd_meterpreter.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/CA_teamviewer-dumper_sysmon_10.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/LsassSilentProcessExit_process_exit_monitor_3001_lsass.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/MSSQL_multiple_failed_logon_EventID_18456.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/Powershell_4104_MiniDumpWriteDump_Lsass.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/Sysmon13_MachineAccount_Password_Hash_Changed_via_LsarSetSecret.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/Sysmon_13_Local_Admin_Password_Changed.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/Zerologon_CVE-2020-1472_DFIR_System_NetLogon_Error_EventID_5805.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/Zerologon_VoidSec_CVE-2020-1472_4626_LT3_Anonym_follwedby_4742_DC_Anony_DC.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/babyshark_mimikatz_powershell.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/dc_applog_ntdsutil_dfir_325_326_327.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/discovery_sysmon_1_iis_pwd_and_config_discovery_appcmd.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/etw_rpc_zerologon.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/kerberos_pwd_spray_4771.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/phish_windows_credentials_powershell_scriptblockLog_4104.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/ppl_bypass_ppldump_knowdll_hijack_sysmon_security.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/remote_pwd_reset_rpc_mimikatz_postzerologon_target_DC.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/sysmon17_18_kekeo_tsssp_default_np.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/sysmon_10_11_lsass_memdump.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/sysmon_10_11_outlfank_dumpert_and_andrewspecial_memdump.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/sysmon_10_1_memdump_comsvcs_minidump.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/sysmon_10_lsass_mimikatz_sekurlsa_logonpasswords.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/sysmon_13_keylogger_directx.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/sysmon_2x10_lsass_with_different_pid_RtlCreateProcessReflection.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/sysmon_3_10_Invoke-Mimikatz_hosted_Github.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/sysmon_rdrleakdiag_lsass_dump.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/DE_104_system_log_cleared.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/DE_1102_security_log_cleared.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/DE_BYOV_Zam64_CA_Memdump_sysmon_7_10.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/DE_EventLog_Service_Crashed.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/DE_Fake_ComputerAccount_4720.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/DE_KernelDebug_and_TestSigning_ON_Security_4826.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/DE_Powershell_CLM_Disabled_Sysmon_12.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/DE_ProcessHerpaderping_Sysmon_11_10_1_7.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/DE_UAC_Disabled_Sysmon_12_13.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/DE_WinEventLogSvc_Crash_System_7036.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/DE_remote_eventlog_svc_crash_byt3bl33d3r_sysmon_17_1_3.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/DE_renamed_psexec_service_sysmon_17_18.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/DE_suspicious_remote_eventlog_svc_access_5145.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/DE_xp_cmdshell_enabled_MSSQL_EID_15457.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/DSE_bypass_BYOV_TDL_dummydriver_sysmon_6_7_13.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/Sysmon 7 Update Session Orchestrator Dll Hijack.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/Sysmon 7 dllhijack_cdpsshims_CDPSvc.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/Sysmon_10_Evasion_Suspicious_NtOpenProcess_CallTrace.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/Sysmon_12_DE_AntiForensics_MRU_DeleteKey.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/Win_4985_T1186_Process_Doppelganging.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/apt10_jjs_sideloading_prochollowing_persist_as_service_sysmon_1_7_8_13.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/de_PsScriptBlockLogging_disabled_sysmon12_13.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/de_hiding_files_via_attrib_cmdlet.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/de_portforward_netsh_rdp_sysmon_13_1.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/de_powershell_execpolicy_changed_sysmon_13.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/de_sysmon_13_VBA_Security_AccessVBOM.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/de_unmanagedpowershell_psinject_sysmon_7_8_10.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/evasion_codeinj_odzhan_conhost_sysmon_10_1.evtx

BIN

Binary file not shown.

Some files were not shown because too many files have changed in this diff Show More