Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Ssh recon #323

Merged
merged 9 commits into from
Aug 22, 2019
Merged

Ssh recon #323

merged 9 commits into from
Aug 22, 2019

Commits on Jan 29, 2019

  1. rules to detect untrusted kernel modules being loaded

    @kravietz
    kravietz committed Jan 29, 2019
    Configuration menu
    Copy the full SHA
    94c979c View commit details
    Browse the repository at this point in the history

  2. rndg failure

    @kravietz
    kravietz committed Jan 29, 2019
    Configuration menu
    Copy the full SHA
    398f2a9 View commit details
    Browse the repository at this point in the history

  3. add RAID and disk failure patterns

    @kravietz
    kravietz committed Jan 29, 2019
    Configuration menu
    Copy the full SHA
    0ed79b3 View commit details
    Browse the repository at this point in the history

Commits on Mar 18, 2019

  1. Add recon group to 5701 Bad protocol version identification 

    This is a frequently signature of repeated SSH exploit probing
and should be tagged with recon to enable timeframe correlation
and active response
    @kravietz
    kravietz committed Mar 18, 2019
    Configuration menu
    Copy the full SHA
    b3ecd31 View commit details
    Browse the repository at this point in the history

Commits on Jun 11, 2019

  1. Fix conflict with mdadm decoder

    @kravietz
    kravietz committed Jun 11, 2019
    Configuration menu
    Copy the full SHA
    1c44567 View commit details
    Browse the repository at this point in the history

  2. Add fixes for RAID events

    @kravietz
    kravietz committed Jun 11, 2019
    Configuration menu
    Copy the full SHA
    71d967a View commit details
    Browse the repository at this point in the history

  3. Add systemd status=1/FAILURE rule

    @kravietz
    kravietz committed Jun 11, 2019
    Configuration menu
    Copy the full SHA
    bc1ff61 View commit details
    Browse the repository at this point in the history

  4. Add ZFS error message

    @kravietz
    kravietz committed Jun 11, 2019
    Configuration menu
    Copy the full SHA
    a307b29 View commit details
    Browse the repository at this point in the history

Commits on Aug 22, 2019

  1. Merge branch '3.10' into ssh-recon

    @chemamartinez
    chemamartinez committed Aug 22, 2019
    Configuration menu
    Copy the full SHA
    397e91b View commit details
    Browse the repository at this point in the history