Skip to content

9 ba lolbas plez - #2418

Merged
patel-bhavin merged 10 commits into
developfrom
10_ba_lolbas_plez
Oct 18, 2022
Merged

patel-bhavin merged 10 commits into
developfrom
10_ba_lolbas_plez

Conversation

@josehelps

@josehelps josehelps commented Oct 18, 2022 •

Copy link
Copy Markdown
Contributor

Details

image

Adds 9 new BA detections of LOLBAS that will alert if executed outside their standard path.

  • ssa___acccheckconsole_exe.yml
  • ssa___adplus_exe.yml
  • ssa___advpack_dll.yml
  • ssa___agentexecutor_exe.yml
  • ssa___appinstaller_exe.yml
  • ssa___appvlp_exe.yml
  • ssa___aspnet_compiler_exe.yml
  • ssa___at_exe.yml
  • ssa___atbroker_exe.yml

Generated from using lolbas_enrichment.py

@auto-assign
auto-assign Bot requested a review from patel-bhavin October 18, 2022 16:56
@josehelps josehelps added WIP DO NOT MERGE Work in Progress BA labels Oct 18, 2022
@josehelps josehelps added 3.51.0 and removed WIP DO NOT MERGE Work in Progress labels Oct 18, 2022
@josehelps josehelps changed the title 10 ba lolbas plez 9 ba lolbas plez Oct 18, 2022
@patel-bhavin

Copy link
Copy Markdown
Contributor

Looks good!

@patel-bhavin
patel-bhavin merged commit e88784e into develop Oct 18, 2022
@delete-merged-branch
delete-merged-branch Bot deleted the 10_ba_lolbas_plez branch October 18, 2022 20:40
@ljstella ljstella removed the 4.4.0 label May 30, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants