mandiant / red_team_tool_countermeasures

mandiant/red_team_tool_countermeasures Issues

Conflict in conditions - Wdscore.dll Hijack (Methodology)
Closed 3 years ago2
Yara rules DSHELL/production/yara/APT_Backdoor_Win_DShell_1.yar and APT_Backdoor_Win_DShell_2.yar trigger too many matches exception in yara-python
Updated 3 years ago
REDFLARE (GORAT) - APT_Backdoor_Win_GORAT_4.yar is missing import statement
Closed 3 years ago1
False-Positive ( APT_Backdoor_Win_DShell_2.yar )
Closed 3 years ago4
SIDs in the Snort rules file are below 1 Million
Updated 3 years ago
Subtle: Identical rule names (ignoring capitalization)
Closed 3 years ago2
Inconsistency between all-yara.yar and the rules dir (APT_Backdoor_Win_GORAT)
Closed 3 years ago2
SHA-1 and SHA-256
Closed 3 years ago3
SUSPICIOUS DLL LOAD (METHODOLOGY).ioc is broken (missing end tags)
Closed 3 years ago1
Documentation for yara rules
Closed 3 years ago1
ریدید
Closed 3 years ago
"Tweak Two Rules
Closed 3 years ago1