Skip to content

Falling for Follina - #2222

Merged
patel-bhavin merged 11 commits into
developfrom
follina
May 31, 2022
Merged

patel-bhavin merged 11 commits into
developfrom
follina

Conversation

@MHaggis

@MHaggis MHaggis commented May 30, 2022 •

Copy link
Copy Markdown
Contributor

New Analytics

  • Windows Office Product Spawning MSDT
  • Windows Execute Arbitrary Commands with MSDT

New Analytic Stories

Details

image

image

Author Checklist

  • Validate name matches <platform>_<mitre att&ck technique>_<short description>
  • Make sure that CI/CD detection-testing and build-and-validate jobs passed ✔️
  • Is there an Atomic Test? Is GUID on the test file under array: atomic_test_guid, example?

Review Checklist

  • Validated SPL logic.
  • Validated tags, description, and how to implement.
  • Verified references match analytic.

@auto-assign
auto-assign Bot requested a review from patel-bhavin May 30, 2022 12:50
josehelps
josehelps previously approved these changes May 31, 2022
@patel-bhavin
patel-bhavin merged commit 9fe8a09 into develop May 31, 2022
@delete-merged-branch
delete-merged-branch Bot deleted the follina branch May 31, 2022 17:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants