Merge pull request #330 from Yamato-Security/delete-sample-evtx-dir

Browse Source

Delete sample-evtx dir

...

This commit is contained in:

Yamato Security

2021-12-22 10:18:56 +09:00

committed by GitHub

parent 0d4fe82a23 62b856efbb

commit 6f31f09c74

503 changed files with 0 additions and 0 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

sample-evtx/DeepBlueCLI/Powershell-Invoke-Obfuscation-encoding-menu.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/Powershell-Invoke-Obfuscation-many.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/Powershell-Invoke-Obfuscation-string-menu.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/disablestop-eventlog.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/eventlog-dac.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/many-events-application.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/many-events-security.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/many-events-system.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/metasploit-psexec-native-target-security.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/metasploit-psexec-native-target-system.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/metasploit-psexec-powershell-target-security.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/metasploit-psexec-powershell-target-system.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/metasploit-psexec-pwshpayload.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/mimikatz-privesc-hashdump.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/mimikatz-privilegedebug-tokenelevate-hashdump.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/new-user-security.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/password-spray.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/powersploit-security.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/powersploit-system.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/psattack-security.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/smb-password-guessing-security.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/AutomatedTestingTools/Malware/DE_timestomp_and_dll_sideloading_and_RunPersist.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/AutomatedTestingTools/Malware/rundll32_cmd_schtask.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/AutomatedTestingTools/Malware/rundll32_hollowing_wermgr_masquerading.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/AutomatedTestingTools/Malware/sideloading_injection_persistence_run_key.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/AutomatedTestingTools/Malware/sideloading_uacbypass_rundll32_injection_c2.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/AutomatedTestingTools/PanacheSysmon_vs_AtomicRedTeam01.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/AutomatedTestingTools/WinDefender_Events_1117_1116_AtomicRedTeam.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/AutomatedTestingTools/panache_sysmon_vs_EDRTestingScript.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Command and Control/DE_RDP_Tunnel_5156.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Command and Control/DE_RDP_Tunneling_4624.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Command and Control/DE_RDP_Tunneling_TerminalServices-RemoteConnectionManagerOperational_1149.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Command and Control/DE_sysmon-3-rdp-tun.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Command and Control/bits_openvpn.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Command and Control/tunna_iis_rdp_smb_tunneling_sysmon_3.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/4794_DSRM_password_change_t1098.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/ACL_ForcePwd_SPNAdd_User_Computer_Accounts.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/CA_4624_4625_LogonType2_LogonProc_chrome.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/CA_DCSync_4662.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/CA_Mimikatz_Memssp_Default_Logs_Sysmon_11.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/CA_PetiPotam_etw_rpc_efsr_5_6.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/CA_chrome_firefox_opera_4663.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/CA_hashdump_4663_4656_lsass_access.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/CA_keefarce_keepass_credump.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/CA_keepass_KeeThief_Get-KeePassDatabaseKey.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/CA_protectedstorage_5145_rpc_masterkey.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/CA_sysmon_hashdump_cmd_meterpreter.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/CA_teamviewer-dumper_sysmon_10.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/LsassSilentProcessExit_process_exit_monitor_3001_lsass.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/MSSQL_multiple_failed_logon_EventID_18456.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/Powershell_4104_MiniDumpWriteDump_Lsass.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/Sysmon13_MachineAccount_Password_Hash_Changed_via_LsarSetSecret.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/Sysmon_13_Local_Admin_Password_Changed.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/Zerologon_CVE-2020-1472_DFIR_System_NetLogon_Error_EventID_5805.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/Zerologon_VoidSec_CVE-2020-1472_4626_LT3_Anonym_follwedby_4742_DC_Anony_DC.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/babyshark_mimikatz_powershell.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/dc_applog_ntdsutil_dfir_325_326_327.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/discovery_sysmon_1_iis_pwd_and_config_discovery_appcmd.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/etw_rpc_zerologon.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/kerberos_pwd_spray_4771.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/phish_windows_credentials_powershell_scriptblockLog_4104.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/ppl_bypass_ppldump_knowdll_hijack_sysmon_security.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/remote_pwd_reset_rpc_mimikatz_postzerologon_target_DC.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/sysmon17_18_kekeo_tsssp_default_np.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/sysmon_10_11_lsass_memdump.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/sysmon_10_11_outlfank_dumpert_and_andrewspecial_memdump.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/sysmon_10_1_memdump_comsvcs_minidump.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/sysmon_10_lsass_mimikatz_sekurlsa_logonpasswords.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/sysmon_13_keylogger_directx.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/sysmon_2x10_lsass_with_different_pid_RtlCreateProcessReflection.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/sysmon_3_10_Invoke-Mimikatz_hosted_Github.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/sysmon_rdrleakdiag_lsass_dump.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/DE_104_system_log_cleared.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/DE_1102_security_log_cleared.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/DE_BYOV_Zam64_CA_Memdump_sysmon_7_10.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/DE_EventLog_Service_Crashed.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/DE_Fake_ComputerAccount_4720.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/DE_KernelDebug_and_TestSigning_ON_Security_4826.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/DE_Powershell_CLM_Disabled_Sysmon_12.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/DE_ProcessHerpaderping_Sysmon_11_10_1_7.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/DE_UAC_Disabled_Sysmon_12_13.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/DE_WinEventLogSvc_Crash_System_7036.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/DE_remote_eventlog_svc_crash_byt3bl33d3r_sysmon_17_1_3.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/DE_renamed_psexec_service_sysmon_17_18.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/DE_suspicious_remote_eventlog_svc_access_5145.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/DE_xp_cmdshell_enabled_MSSQL_EID_15457.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/DSE_bypass_BYOV_TDL_dummydriver_sysmon_6_7_13.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/Sysmon 7 Update Session Orchestrator Dll Hijack.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/Sysmon 7 dllhijack_cdpsshims_CDPSvc.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/Sysmon_10_Evasion_Suspicious_NtOpenProcess_CallTrace.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/Sysmon_12_DE_AntiForensics_MRU_DeleteKey.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/Win_4985_T1186_Process_Doppelganging.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/apt10_jjs_sideloading_prochollowing_persist_as_service_sysmon_1_7_8_13.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/de_PsScriptBlockLogging_disabled_sysmon12_13.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/de_hiding_files_via_attrib_cmdlet.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/de_portforward_netsh_rdp_sysmon_13_1.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/de_powershell_execpolicy_changed_sysmon_13.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/de_sysmon_13_VBA_Security_AccessVBOM.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/de_unmanagedpowershell_psinject_sysmon_7_8_10.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/evasion_codeinj_odzhan_conhost_sysmon_10_1.evtx

BIN

Binary file not shown.

Some files were not shown because too many files have changed in this diff Show More