 ikelosandGitHub
|
a2ebe6006e
|
Merge pull request #1852 from SolitudePy/syscalls_malware_plugin
Malware categorization: categorize EDR evading plugins with in/direct_syscall
|
2025-06-29 16:20:06 +01:00 |
|
|
ikelosandGitHub
|
9440075e52
|
Merge pull request #1851 from SolitudePy/ldr_modules_malware
Plugins: categorize ldrmodules as a malware plugin
|
2025-06-29 16:18:01 +01:00 |
|
|
ikelosandGitHub
|
308a4668b7
|
Merge pull request #1829 from SolitudePy/regexscan
Regexscan fixes
|
2025-06-22 23:10:38 +01:00 |
|
|
SolitudePy
|
aa4ef88b51
|
fix: black lint
|
2025-06-14 23:17:04 +03:00 |
|
|
SolitudePy
|
2422f34b88
|
black
|
2025-06-14 23:15:01 +03:00 |
|
|
SolitudePy
|
7cc8c6e94c
|
Plugins: categorize indirect_system_calls as a malware plugin
|
2025-06-14 23:08:56 +03:00 |
|
|
SolitudePy
|
e37ed0e806
|
Plugins: categorize direct_system_calls as a malware plugin
|
2025-06-14 23:08:15 +03:00 |
|
|
SolitudePy
|
215ba1dfaa
|
Plugins: categorize ldrmodules as a malware plugin
|
2025-06-13 17:42:17 +03:00 |
|
|
SolitudePy
|
c270cf4b15
|
RegexScan: parameterize _generator
|
2025-06-12 20:09:28 +03:00 |
|
|
ikelosandGitHub
|
f5feee842d
|
Merge pull request #1841 from SolitudePy/check_creds_malware
Malware categorization: linux.check_creds
|
2025-06-12 08:05:01 +01:00 |
|
|
ikelosandGitHub
|
470c53c5f7
|
Merge branch 'develop' into check_creds_malware
|
2025-06-11 22:21:59 +01:00 |
|
|
ikelosandGitHub
|
63019c0988
|
Merge pull request #1833 from SolitudePy/psxview_malware
Malware categorization: windows.psxview
|
2025-06-11 22:18:32 +01:00 |
|
|
SolitudePy
|
742b0634b9
|
readjust _run to contain less code & removal of redundant code
|
2025-06-11 19:30:29 +03:00 |
|
|
ikelosandGitHub
|
76db04c494
|
Merge pull request #1807 from volatilityfoundation/bugfix/windows_thrdscan_tuple_unpacking
Windows Thrdscan: Fix broken tuple unpacking
|
2025-06-11 14:06:43 +01:00 |
|
|
ikelosandGitHub
|
58f441186c
|
Merge pull request #1850 from SolitudePy/malware_plugins_category
Malware categorization: linux.tty_check, linux.netfilter, linux.modxview
|
2025-06-10 21:20:12 +01:00 |
|
|
ikelosandGitHub
|
43ed10a4f8
|
Merge pull request #1846 from SolitudePy/linux_malware_plugins
Malware categorization: linux.malfind & linux.keyboard_notifiers
|
2025-06-10 21:07:42 +01:00 |
|
|
ikelosandGitHub
|
58e41d754a
|
Merge pull request #1845 from SolitudePy/categorize_linux_malware
Malware categorization: linux.check_afinfo & linux.hidden_modules
|
2025-06-10 21:05:41 +01:00 |
|
|
ikelosandGitHub
|
9596893f1b
|
Merge pull request #1844 from SolitudePy/check_syscall_malware
Malware categorization: linux.check_syscall
|
2025-06-10 21:02:34 +01:00 |
|
|
ikelosandGitHub
|
e06910c763
|
Merge pull request #1843 from SolitudePy/check_modules_malware
Malware categorization: linux.check_modules
|
2025-06-10 21:00:02 +01:00 |
|
|
ikelosandGitHub
|
c62d77e4e2
|
Merge pull request #1842 from SolitudePy/check_idt_malware
Malware categorization: linux.check_idt
|
2025-06-10 20:58:04 +01:00 |
|
|
ikelosandGitHub
|
f2f83f5ce1
|
Merge pull request #1838 from SolitudePy/unhooked_syscalls_malware
Malware categorization: windows.unhooked_system_calls
|
2025-06-10 20:54:33 +01:00 |
|
|
SolitudePy
|
8040c049e0
|
Tests: change class name for tty_check
|
2025-06-10 20:30:05 +03:00 |
|
|
SolitudePy
|
e3877f68ec
|
Plugins: categorize linux.tty_check as a malware plugin
|
2025-06-10 19:37:57 +03:00 |
|
|
SolitudePy
|
77801e4cb0
|
Plugins: categorize linux.netfilter as a malware plugin
|
2025-06-10 19:22:12 +03:00 |
|
|
SolitudePy
|
6c35bc3fa0
|
Plugins: categorize linux.modxview as a malware plugin
|
2025-06-10 19:12:09 +03:00 |
|
|
SolitudePy
|
a06d59bc52
|
Plugins: categorize linux.malfind as a malware plugin
|
2025-06-07 22:58:46 +03:00 |
|
|
SolitudePy
|
faf7d781be
|
Plugins: categorize linux.keyboard_notifiers as a malware plugin
|
2025-06-07 22:55:29 +03:00 |
|
|
SolitudePy
|
f9941b5b6e
|
black
|
2025-06-07 22:00:03 +03:00 |
|
|
SolitudePy
|
c71fd30c8a
|
shortcut class name
|
2025-06-07 21:58:43 +03:00 |
|
|
SolitudePy
|
21d66839fe
|
use class name with module name?
|
2025-06-07 21:56:36 +03:00 |
|
|
SolitudePy
|
35c4e9f50b
|
Plugins: change class name to original
|
2025-06-07 21:52:22 +03:00 |
|
|
ikelosandGitHub
|
ebd6c8719a
|
Merge pull request #1840 from SolitudePy/drivermodule_malware
Malware categorization: windows.drivermodule
|
2025-06-07 18:09:57 +01:00 |
|
|
SolitudePy
|
5144f26a8e
|
CI
|
2025-06-07 19:58:12 +03:00 |
|
|
SolitudePy
|
1d2b78976a
|
Plugins: categorize linux.hidden_modules as a malware plugin
|
2025-06-07 19:54:44 +03:00 |
|
|
SolitudePy
|
962665b412
|
Plugins: categorize linux.check_afinfo as a malware plugin + test fix
|
2025-06-07 19:44:50 +03:00 |
|
|
SolitudePy
|
70514396b3
|
linux.malware.check_syscall - fix test
|
2025-06-07 19:35:26 +03:00 |
|
|
SolitudePy
|
5b538d1686
|
Plugins: categorize linux.check_syscall as a malware plugin
|
2025-06-07 19:35:19 +03:00 |
|
|
SolitudePy
|
4b279f9633
|
linux.malware.check_modules - fix test
|
2025-06-07 19:30:04 +03:00 |
|
|
SolitudePy
|
832c997e20
|
Plugins: categorize linux.check_modules as a malware plugin
|
2025-06-07 19:29:55 +03:00 |
|
|
SolitudePy
|
4bc1bb818d
|
linux.malware.check_idt - fix doc & test deps
|
2025-06-07 19:23:13 +03:00 |
|
|
SolitudePy
|
c36fdd69f6
|
Plugins: categorize linux.check_idt as a malware plugin
|
2025-06-07 19:22:58 +03:00 |
|
|
SolitudePy
|
85a5eb5d41
|
linux.malware.check_creds - fix deps in: test, doc
|
2025-06-07 18:42:42 +03:00 |
|
|
SolitudePy
|
8acf97c475
|
Plugins: categorize linux.check_creds as a malwarep lugin
|
2025-06-07 18:42:13 +03:00 |
|
|
SolitudePy
|
ef07b07659
|
Plugins: categorize windows.drivermodule as a malware plugin
|
2025-06-07 18:25:53 +03:00 |
|
|
SolitudePy
|
f97bc920bb
|
Plugins: changed class name due to incorrect resolution
|
2025-06-07 18:09:26 +03:00 |
|
|
SolitudePy
|
66473ac644
|
categorize windows.unhooked_system_calls as a malware plugin
|
2025-06-07 18:00:36 +03:00 |
|
|
ikelosandGitHub
|
2fbb872c9a
|
Merge pull request #1834 from SolitudePy/skel_key_malware
Malware categorization: windows.skeleton_key_check
|
2025-06-07 15:12:37 +01:00 |
|
|
ikelosandGitHub
|
84c33916df
|
Merge pull request #1835 from SolitudePy/suspicious_threads_malware
Malware categorization: windows.suspicious_threads
|
2025-06-07 15:10:02 +01:00 |
|
|
ikelosandGitHub
|
9c84152eea
|
Merge pull request #1832 from SolitudePy/processghosting_malware
Malware categorization: windows.processghosting
|
2025-06-07 15:07:36 +01:00 |
|
|
ikelosandGitHub
|
2bd9a0e710
|
Merge pull request #1831 from SolitudePy/hollowprocesses_malware
Malware categorization: windows.hollowprocesses
|
2025-06-07 15:05:59 +01:00 |
|