LOLBAS icon indicating copy to clipboard operation
LOLBAS copied to clipboard

Add/Update LOLBINS

Open nasbench opened this issue 2 years ago • 1 comments

Hi,

This PR covers the following changes:

  • Creation of New LOLScript "Launch-VsDevShell.ps1" (https://twitter.com/nas_bench/status/1535981653239255040)
  • Update WSL LOLBIN with new Sigma Rules and CLI variation (https://twitter.com/nas_bench/status/1535431474429808642)
  • Update Adplus LOLBIN with new Sigma Rules and CLI variation (https://twitter.com/nas_bench/status/1534916659676422152 + https://twitter.com/nas_bench/status/1534915321856917506)
  • Update CDB LOLBIN with new Sigma Rules and CLI variation (https://twitter.com/nas_bench/status/1534957360032120833)
  • Update PCWrun LOLBIN with new CLI variation related to Follina (https://twitter.com/nas_bench/status/1535663791362519040) and Sigma Rules
  • Update Msdt LOLBIN with new Sigma rules and CLI variations (https://twitter.com/nas_bench/status/1531944240271568896)
  • Creation of New LOLBin "OpenConsole" (https://twitter.com/nas_bench/status/1537563834478645252)
  • Creation of New LOLBIN "wt.exe" (https://twitter.com/nas_bench/status/1552100271668469761)

nasbench avatar Jun 13 '22 23:06 nasbench

Just saw your tweet, cool stuff. Will do my best to review this PR soon, it's a big one!

wietze avatar Jul 27 '22 12:07 wietze

Reminder :)

nasbench avatar Nov 03 '22 22:11 nasbench

Thanks for taking the time to review this @wietze. I've updated the files accordingly, please check when you have the time :)

I've also updated some SIGMA links and probably will do a separate PR to update all SIGMA links. As we've recently made some changes to the file's naming and logic.

nasbench avatar Nov 08 '22 19:11 nasbench