Commits

Branch selector

 master

User selector

All users

Datepicker

All time

Commit History

Commits on Jun 28, 2023

• New Sliver and Metasploit EVTX files including cmd.exe writing to ADMIN$, and suspicious remote threads

  eric-conrad

  authored
  2eecc65

• Update safelist.txt

  eric-conrad

  authored
  8e510aa

• Added Sysmon event 8 (Suspicious remote thread)

  eric-conrad

  authored
  50d2ca9

• Added event 29, updated for new Sysmon schema

  eric-conrad

  authored
  ac1a999

• Update DeepBlueHash-checker.ps1

  eric-conrad

  authored
  9e5979f

• Update README-DeepBlueHash.md

  eric-conrad

  authored
  e9fc13a

• Updated for Virustotal Key v3

  eric-conrad

  authored
  7fb4128

• Update DeepBlueHash-collector.ps1

  Show description for 41fe88f
  eric-conrad

  authored
  41fe88f

• Update DeepBlueHash-checker.ps1

  Show description for 3c8fa15
  eric-conrad

  authored
  3c8fa15

Commits on Jun 27, 2023

• Update README-DeepBlueHash.md

  eric-conrad

  authored
  cd3e304

• Update README-DeepBlueHash.md

  eric-conrad

  authored
  a99c412

• Update README-DeepBlueHash.md

  eric-conrad

  authored
  1699dfc

Commits on Jun 7, 2023

• Rename DeepWhite-collector.ps1 to DeepBlueHash-collector.ps1

  eric-conrad

  authored
  fc67071

• Rename DeepWhite-checker.ps1 to DeepBlueHash-checker.ps1

  eric-conrad

  authored
  ecbc203

• More updates, including more WMI detection

  eric-conrad

  committed
  2290102

• Minor fix

  eric-conrad

  committed
  79dd0e6

• Updated for Sysmon schema 8

  eric-conrad

  committed
  f354155

• Minor version update

  eric-conrad

  committed
  ce3c408

• Rename DeepBlueHash-checker.ps1 to DeepWhite-checker.ps1

  Show description for e07e5aa
  eric-conrad

  authored
  e07e5aa

• Rename DeepBlueHash-collector.ps1 to DeepWhite-collector.ps1

  Show description for 9369182
  eric-conrad

  authored
  9369182

• Merge pull request #25 from netscylla/wmi-events

  Show description for 9e51dd0
  eric-conrad

  authored
  9e51dd0

• Merge pull request #27 from TheNiv/patch-1

  Show description for 2fc4fd5
  eric-conrad

  authored
  2fc4fd5

Commits on Feb 13, 2022

• s/White/BlueHash/g

  eric-conrad

  authored
  120448c

Commits on Jan 5, 2022

• Merge pull request #29 from sans-blue-team/Conrad-test

  Show description for 115b4f3
  eric-conrad

  authored
  115b4f3

• s/DeepWhite/DeepBlueHash

  eric-conrad

  committed
  0f6a93b

Commits on Nov 11, 2021

• Merge pull request #28 from n3tl0kr/patch-1

  Show description for eebd75d
  eric-conrad

  authored
  eebd75d

• Small typographical error in output

  n3tl0kr

  authored
  f5b844c

Commits on Nov 6, 2021

• Fixed windows event log check.

  Show description for ea97820
  TheNiv

  authored
  ea97820

Commits on Oct 29, 2021

• Added another base64 encoding method

  eric-conrad

  authored
  cf9411f

• Added some ASEPs

  eric-conrad

  authored
  e3bf84f

• Was analyzing Sysmon event 1 image instead of CommandLine. Fixed

  eric-conrad

  authored
  45d62cb

Commits on Oct 28, 2021

• Added # of unique accounts sprayed

  eric-conrad

  authored
  350fe3c

• s/Passworg/Password/g

  eric-conrad

  authored
  d7d8d5e

• s/DeepBlueCLI/DeepWhite/g

  eric-conrad

  authored
  5f2a62c

• s/antivrus/antivirus/g

  eric-conrad

  authored
  46fe6b4

Pagination

PreviousNext