Merge pull request #330 from Yamato-Security/delete-sample-evtx-dir

Browse Source

Delete sample-evtx dir

...

This commit is contained in:

Yamato Security authored and GitHub committed 2021-12-22 10:18:56 +09:00

2 parents 0d4fe82a23 62b856efbb

commit 6f31f09c74

503 files changed

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

sample-evtx/DeepBlueCLI/Powershell-Invoke-Obfuscation-encoding-menu.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/Powershell-Invoke-Obfuscation-many.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/Powershell-Invoke-Obfuscation-string-menu.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/disablestop-eventlog.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/eventlog-dac.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/many-events-application.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/many-events-security.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/many-events-system.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/metasploit-psexec-native-target-security.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/metasploit-psexec-native-target-system.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/metasploit-psexec-powershell-target-security.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/metasploit-psexec-powershell-target-system.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/metasploit-psexec-pwshpayload.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/mimikatz-privesc-hashdump.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/mimikatz-privilegedebug-tokenelevate-hashdump.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/new-user-security.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/password-spray.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/powersploit-security.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/powersploit-system.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/psattack-security.evtx

BIN

Binary file not shown.

sample-evtx/DeepBlueCLI/smb-password-guessing-security.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/AutomatedTestingTools/Malware/DE_timestomp_and_dll_sideloading_and_RunPersist.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/AutomatedTestingTools/Malware/rundll32_cmd_schtask.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/AutomatedTestingTools/Malware/rundll32_hollowing_wermgr_masquerading.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/AutomatedTestingTools/Malware/sideloading_injection_persistence_run_key.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/AutomatedTestingTools/Malware/sideloading_uacbypass_rundll32_injection_c2.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/AutomatedTestingTools/PanacheSysmon_vs_AtomicRedTeam01.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/AutomatedTestingTools/WinDefender_Events_1117_1116_AtomicRedTeam.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/AutomatedTestingTools/panache_sysmon_vs_EDRTestingScript.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Command and Control/DE_RDP_Tunnel_5156.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Command and Control/DE_RDP_Tunneling_4624.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Command and Control/DE_RDP_Tunneling_TerminalServices-RemoteConnectionManagerOperational_1149.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Command and Control/DE_sysmon-3-rdp-tun.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Command and Control/bits_openvpn.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Command and Control/tunna_iis_rdp_smb_tunneling_sysmon_3.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/4794_DSRM_password_change_t1098.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/ACL_ForcePwd_SPNAdd_User_Computer_Accounts.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/CA_4624_4625_LogonType2_LogonProc_chrome.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/CA_DCSync_4662.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/CA_Mimikatz_Memssp_Default_Logs_Sysmon_11.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/CA_PetiPotam_etw_rpc_efsr_5_6.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/CA_chrome_firefox_opera_4663.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/CA_hashdump_4663_4656_lsass_access.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/CA_keefarce_keepass_credump.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/CA_keepass_KeeThief_Get-KeePassDatabaseKey.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/CA_protectedstorage_5145_rpc_masterkey.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/CA_sysmon_hashdump_cmd_meterpreter.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/CA_teamviewer-dumper_sysmon_10.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/LsassSilentProcessExit_process_exit_monitor_3001_lsass.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/MSSQL_multiple_failed_logon_EventID_18456.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/Powershell_4104_MiniDumpWriteDump_Lsass.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/Sysmon13_MachineAccount_Password_Hash_Changed_via_LsarSetSecret.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/Sysmon_13_Local_Admin_Password_Changed.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/Zerologon_CVE-2020-1472_DFIR_System_NetLogon_Error_EventID_5805.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/Zerologon_VoidSec_CVE-2020-1472_4626_LT3_Anonym_follwedby_4742_DC_Anony_DC.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/babyshark_mimikatz_powershell.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/dc_applog_ntdsutil_dfir_325_326_327.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/discovery_sysmon_1_iis_pwd_and_config_discovery_appcmd.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/etw_rpc_zerologon.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/kerberos_pwd_spray_4771.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/phish_windows_credentials_powershell_scriptblockLog_4104.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/ppl_bypass_ppldump_knowdll_hijack_sysmon_security.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/remote_pwd_reset_rpc_mimikatz_postzerologon_target_DC.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/sysmon17_18_kekeo_tsssp_default_np.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/sysmon_10_11_lsass_memdump.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/sysmon_10_11_outlfank_dumpert_and_andrewspecial_memdump.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/sysmon_10_1_memdump_comsvcs_minidump.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/sysmon_10_lsass_mimikatz_sekurlsa_logonpasswords.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/sysmon_13_keylogger_directx.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/sysmon_2x10_lsass_with_different_pid_RtlCreateProcessReflection.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/sysmon_3_10_Invoke-Mimikatz_hosted_Github.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Credential Access/sysmon_rdrleakdiag_lsass_dump.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/DE_104_system_log_cleared.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/DE_1102_security_log_cleared.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/DE_BYOV_Zam64_CA_Memdump_sysmon_7_10.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/DE_EventLog_Service_Crashed.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/DE_Fake_ComputerAccount_4720.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/DE_KernelDebug_and_TestSigning_ON_Security_4826.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/DE_Powershell_CLM_Disabled_Sysmon_12.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/DE_ProcessHerpaderping_Sysmon_11_10_1_7.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/DE_UAC_Disabled_Sysmon_12_13.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/DE_WinEventLogSvc_Crash_System_7036.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/DE_remote_eventlog_svc_crash_byt3bl33d3r_sysmon_17_1_3.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/DE_renamed_psexec_service_sysmon_17_18.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/DE_suspicious_remote_eventlog_svc_access_5145.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/DE_xp_cmdshell_enabled_MSSQL_EID_15457.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/DSE_bypass_BYOV_TDL_dummydriver_sysmon_6_7_13.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/Sysmon 7 Update Session Orchestrator Dll Hijack.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/Sysmon 7 dllhijack_cdpsshims_CDPSvc.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/Sysmon_10_Evasion_Suspicious_NtOpenProcess_CallTrace.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/Sysmon_12_DE_AntiForensics_MRU_DeleteKey.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/Win_4985_T1186_Process_Doppelganging.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/apt10_jjs_sideloading_prochollowing_persist_as_service_sysmon_1_7_8_13.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/de_PsScriptBlockLogging_disabled_sysmon12_13.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/de_hiding_files_via_attrib_cmdlet.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/de_portforward_netsh_rdp_sysmon_13_1.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/de_powershell_execpolicy_changed_sysmon_13.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/de_sysmon_13_VBA_Security_AccessVBOM.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/de_unmanagedpowershell_psinject_sysmon_7_8_10.evtx

BIN

Binary file not shown.

sample-evtx/EVTX-ATTACK-SAMPLES/Defense Evasion/evasion_codeinj_odzhan_conhost_sysmon_10_1.evtx

BIN

Binary file not shown.

Loaded 100 of 503 files, more files were not shown because too many files have changed in this diff. Show more