Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Use Sysmon logs to search commandline arg length by char count #15

Closed
ceramicskate0 opened this issue Dec 31, 2017 · 1 comment
Closed

Use Sysmon logs to search commandline arg length by char count #15

ceramicskate0 opened this issue Dec 31, 2017 · 1 comment
Assignees
@ceramicskate0
Labels
App Enhancement Something to make app better or change to current feature

Comments

@ceramicskate0
Copy link
Owner

Sysmon can give commandline args, we can use that to get commandline arg length to detect fileless malware. We can do this by counting chars in commandline args for both parent and target commandline args.
@ceramicskate0 ceramicskate0 added the App Enhancement Something to make app better or change to current feature label Dec 31, 2017
@ceramicskate0 ceramicskate0 self-assigned this Dec 31, 2017
@ceramicskate0
Copy link
Owner Author

pushed on version 0.1.0.4

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@ceramicskate0 ceramicskate0

Labels
App Enhancement Something to make app better or change to current feature
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@ceramicskate0