Skip to content

Commit

Permalink
remove more duplicate references -2
Browse files Browse the repository at this point in the history
  • Loading branch information
nasbench committed Aug 15, 2024
1 parent 41be55f commit 252e731
Show file tree
Hide file tree
Showing 40 changed files with 18 additions and 57 deletions.
5 changes: 2 additions & 3 deletions yaml/137daca4-0d7b-48aa-8574-f7eb6ad02526.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -181,9 +181,8 @@ KnownVulnerableSamples:
LoadsDespiteHVCI: 'FALSE'
MitreID: T1068
Resources:
- ' /~https://github.com/jbaines-r7/dellicious'
- ' https://www.rapid7.com/blog/post/2021/12/13/driver-based-attacks-past-and-present/'
- /~https://github.com/jbaines-r7/dellicious and https://www.rapid7.com/blog/post/2021/12/13/driver-based-attacks-past-and-present/
- /~https://github.com/jbaines-r7/dellicious
- https://www.rapid7.com/blog/post/2021/12/13/driver-based-attacks-past-and-present/
Tags:
- speedfan.sys
Verified: 'TRUE'
1 change: 0 additions & 1 deletion yaml/1524a54d-520d-4fa4-a7d5-aaaa066fbfc4.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -595,7 +595,6 @@ KnownVulnerableSamples:
LoadsDespiteHVCI: 'TRUE'
MitreID: T1068
Resources:
- ' /~https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md'
- /~https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md
Tags:
- dbk64.sys
Expand Down
5 changes: 2 additions & 3 deletions yaml/205721b7-b83b-414a-b4b5-8bacb4a37777.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -468,11 +468,10 @@ KnownVulnerableSamples:
LoadsDespiteHVCI: 'TRUE'
MitreID: T1068
Resources:
- ' /~https://github.com/jbaines-r7/dellicious'
- ' https://www.rapid7.com/blog/post/2021/12/13/driver-based-attacks-past-and-present/'
- /~https://github.com/jbaines-r7/dellicious
- https://www.rapid7.com/blog/post/2021/12/13/driver-based-attacks-past-and-present/
- https://securelist.com/shamoon-the-wiper-further-details-part-ii/57784/
- /~https://github.com/Yara-Rules/rules/blob/master/malware/MALW_Shamoon.yar
- /~https://github.com/jbaines-r7/dellicious and https://www.rapid7.com/blog/post/2021/12/13/driver-based-attacks-past-and-present/
Tags:
- elrawdsk.sys
Verified: 'TRUE'
1 change: 0 additions & 1 deletion yaml/23f11e19-0776-4dd4-9c9c-7f6b60f8553f.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -216,7 +216,6 @@ KnownVulnerableSamples:
LoadsDespiteHVCI: 'FALSE'
MitreID: T1068
Resources:
- ' https://gist.github.com/k4nfr3/af970e7facb09195e56f2112e1c9549c'
- https://gist.github.com/k4nfr3/af970e7facb09195e56f2112e1c9549c
Tags:
- ATSZIO.sys
Expand Down
1 change: 0 additions & 1 deletion yaml/268e87ba-ad44-4f3c-986f-26712cac68da.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -331,7 +331,6 @@ KnownVulnerableSamples:
LoadsDespiteHVCI: 'FALSE'
MitreID: T1068
Resources:
- ' /~https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md'
- /~https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md
Tags:
- Phymemx64.sys
Expand Down
5 changes: 2 additions & 3 deletions yaml/29cb263b-b0b0-40d5-a97d-5ddf4ba79c1e.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -29,9 +29,8 @@ KnownVulnerableSamples:
LoadsDespiteHVCI: 'TRUE'
MitreID: T1068
Resources:
- ' /~https://github.com/jbaines-r7/dellicious'
- ' https://www.rapid7.com/blog/post/2021/12/13/driver-based-attacks-past-and-present/'
- /~https://github.com/jbaines-r7/dellicious and https://www.rapid7.com/blog/post/2021/12/13/driver-based-attacks-past-and-present/
- /~https://github.com/jbaines-r7/dellicious
- https://www.rapid7.com/blog/post/2021/12/13/driver-based-attacks-past-and-present/
Tags:
- goad.sys
Verified: 'FALSE'
1 change: 0 additions & 1 deletion yaml/32ccd436-eb13-4ab3-83d4-3e5471f4e364.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -246,7 +246,6 @@ KnownVulnerableSamples:
LoadsDespiteHVCI: 'FALSE'
MitreID: T1068
Resources:
- ' /~https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md'
- /~https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md
Tags:
- AsrDrv103.sys
Expand Down
5 changes: 2 additions & 3 deletions yaml/351ff5ca-f07b-4eb6-9300-d5d31514defb.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -5118,9 +5118,8 @@ KnownVulnerableSamples:
LoadsDespiteHVCI: 'FALSE'
MitreID: T1068
Resources:
- ' /~https://github.com/jbaines-r7/dellicious'
- ' https://www.rapid7.com/blog/post/2021/12/13/driver-based-attacks-past-and-present/'
- /~https://github.com/jbaines-r7/dellicious and https://www.rapid7.com/blog/post/2021/12/13/driver-based-attacks-past-and-present/
- /~https://github.com/jbaines-r7/dellicious
- https://www.rapid7.com/blog/post/2021/12/13/driver-based-attacks-past-and-present/
Tags:
- nscm.sys
Verified: 'TRUE'
1 change: 0 additions & 1 deletion yaml/3ab0d182-6365-47a7-89f4-34121e889503.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -318,7 +318,6 @@ KnownVulnerableSamples:
LoadsDespiteHVCI: 'TRUE'
MitreID: T1068
Resources:
- ' /~https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md'
- /~https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md
Tags:
- HwOs2Ec10x64.sys
Expand Down
1 change: 0 additions & 1 deletion yaml/3bc629e8-7bf8-40c2-965b-87eb155e0065.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -210,7 +210,6 @@ KnownVulnerableSamples:
LoadsDespiteHVCI: 'FALSE'
MitreID: T1068
Resources:
- ' /~https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md'
- /~https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md
Tags:
- mtcBSv64.sys
Expand Down
1 change: 0 additions & 1 deletion yaml/47724cc1-bf75-4ab7-a47a-355a9aa30de1.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -185,7 +185,6 @@ KnownVulnerableSamples:
LoadsDespiteHVCI: 'FALSE'
MitreID: T1068
Resources:
- ' /~https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md'
- /~https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md
Tags:
- BSMIx64.sys
Expand Down
1 change: 0 additions & 1 deletion yaml/47fe1aaf-02cd-4a41-8bf5-0047015a2a6e.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -209,7 +209,6 @@ KnownVulnerableSamples:
LoadsDespiteHVCI: 'FALSE'
MitreID: T1068
Resources:
- ' /~https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md'
- /~https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md
Tags:
- phymem64.sys
Expand Down
1 change: 0 additions & 1 deletion yaml/48bc2815-85ec-4436-a51a-69810c8cb171.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -214,7 +214,6 @@ KnownVulnerableSamples:
LoadsDespiteHVCI: 'FALSE'
MitreID: T1068
Resources:
- ' /~https://github.com/Chigusa0w0/AsusDriversPrivEscala'
- /~https://github.com/Chigusa0w0/AsusDriversPrivEscala
Tags:
- driver7-x64.sys
Expand Down
1 change: 0 additions & 1 deletion yaml/54d67d79-0268-4c5f-be7e-0f74cd20828a.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -167,7 +167,6 @@ KnownVulnerableSamples:
LoadsDespiteHVCI: 'FALSE'
MitreID: T1068
Resources:
- ' /~https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md'
- /~https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md
Tags:
- NTIOLib_X64.sys
Expand Down
1 change: 0 additions & 1 deletion yaml/5af9abf0-d8de-4e9b-8141-e9e97a31901a.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -208,7 +208,6 @@ KnownVulnerableSamples:
LoadsDespiteHVCI: 'FALSE'
MitreID: T1068
Resources:
- ' /~https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md'
- /~https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md
Tags:
- AsrDrv102.sys
Expand Down
1 change: 0 additions & 1 deletion yaml/670dc258-78b5-4552-a16b-b41917c86f8d.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -219,7 +219,6 @@ KnownVulnerableSamples:
LoadsDespiteHVCI: 'FALSE'
MitreID: T1068
Resources:
- ' /~https://github.com/Chigusa0w0/AsusDriversPrivEscala'
- /~https://github.com/Chigusa0w0/AsusDriversPrivEscala
Tags:
- driver7-x86.sys
Expand Down
2 changes: 1 addition & 1 deletion yaml/6d21df78-d718-44df-b722-99eec654f5b2.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -145,7 +145,7 @@ KnownVulnerableSamples:
LoadsDespiteHVCI: 'FALSE'
MitreID: T1068
Resources:
- ' https://www.matteomalvica.com/blog/2020/09/24/weaponizing-cve-2020-17382/'
- https://www.matteomalvica.com/blog/2020/09/24/weaponizing-cve-2020-17382/
- https://packetstormsecurity.com/files/159315/MSI-Ambient-Link-Driver-1.0.0.8-Privilege-Escalation.html
- https://www.coresecurity.com/core-labs/advisories/msi-ambient-link-multiple-vulnerabilities
- /~https://github.com/Exploitables/CVE-2020-17382
Expand Down
1 change: 0 additions & 1 deletion yaml/6fc3034f-8b40-44ef-807a-f61d3ea2dece.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -180,7 +180,6 @@ KnownVulnerableSamples:
LoadsDespiteHVCI: 'FALSE'
MitreID: T1068
Resources:
- ' /~https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md'
- /~https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md
Tags:
- NBIOLib_X64.sys
Expand Down
1 change: 0 additions & 1 deletion yaml/7c83cb1a-a5ab-4ea0-aa69-0e9a1d09a82f.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -170,7 +170,6 @@ KnownVulnerableSamples:
LoadsDespiteHVCI: 'FALSE'
MitreID: T1068
Resources:
- ' /~https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md'
- /~https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md
Tags:
- GVCIDrv64.sys
Expand Down
7 changes: 3 additions & 4 deletions yaml/855ade1f-8a9e-4c9d-ab8e-d7e409609852.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -5130,10 +5130,9 @@ KnownVulnerableSamples:
LoadsDespiteHVCI: 'FALSE'
MitreID: T1068
Resources:
- ' /~https://github.com/jbaines-r7/dellicious'
- ' https://www.rapid7.com/blog/post/2021/12/13/driver-based-attacks-past-and-present/'
- ' https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2018/03/08064459/Equation_group_questions_and_answers.pdf'
- /~https://github.com/jbaines-r7/dellicious and https://www.rapid7.com/blog/post/2021/12/13/driver-based-attacks-past-and-present/
- /~https://github.com/jbaines-r7/dellicious
- https://www.rapid7.com/blog/post/2021/12/13/driver-based-attacks-past-and-present/
- https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2018/03/08064459/Equation_group_questions_and_answers.pdf
Tags:
- elbycdio.sys
Verified: 'TRUE'
5 changes: 2 additions & 3 deletions yaml/8ff4ab50-05b7-4bfa-b994-1920c4ed4978.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -250,9 +250,8 @@ KnownVulnerableSamples:
LoadsDespiteHVCI: 'FALSE'
MitreID: T1068
Resources:
- ' /~https://github.com/jbaines-r7/dellicious'
- ' https://www.rapid7.com/blog/post/2021/12/13/driver-based-attacks-past-and-present/'
- /~https://github.com/jbaines-r7/dellicious and https://www.rapid7.com/blog/post/2021/12/13/driver-based-attacks-past-and-present/
- /~https://github.com/jbaines-r7/dellicious
- https://www.rapid7.com/blog/post/2021/12/13/driver-based-attacks-past-and-present/
Tags:
- ncpl.sys
Verified: 'TRUE'
1 change: 0 additions & 1 deletion yaml/902249eb-87cb-4c01-8da7-17675d743cd7.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -161,7 +161,6 @@ KnownVulnerableSamples:
LoadsDespiteHVCI: 'FALSE'
MitreID: T1068
Resources:
- ' /~https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md'
- /~https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md
Tags:
- WinFlash64.sys
Expand Down
1 change: 0 additions & 1 deletion yaml/9074a02a-b1ca-4bfb-8918-5b88e91c04a2.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -1156,7 +1156,6 @@ KnownVulnerableSamples:
LoadsDespiteHVCI: 'FALSE'
MitreID: T1068
Resources:
- ' /~https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md'
- /~https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md
Tags:
- superbmc.sys
Expand Down
1 change: 0 additions & 1 deletion yaml/9b65dba4-81a0-48cc-8ff0-a4f353881062.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -121,7 +121,6 @@ KnownVulnerableSamples:
LoadsDespiteHVCI: 'FALSE'
MitreID: T1068
Resources:
- ' https://gist.github.com/k4nfr3/af970e7facb09195e56f2112e1c9549c'
- https://gist.github.com/k4nfr3/af970e7facb09195e56f2112e1c9549c
Tags:
- EneIo64.sys
Expand Down
1 change: 0 additions & 1 deletion yaml/9e87b6b0-00ed-4259-bcd7-05e2c924d58c.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -209,7 +209,6 @@ KnownVulnerableSamples:
LoadsDespiteHVCI: 'FALSE'
MitreID: T1068
Resources:
- ' /~https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md'
- /~https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md
Tags:
- BSMEMx64.sys
Expand Down
1 change: 0 additions & 1 deletion yaml/a338a9fc-9fe3-400c-9fe4-69bb7892602d.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -166,7 +166,6 @@ KnownVulnerableSamples:
LoadsDespiteHVCI: 'FALSE'
MitreID: T1068
Resources:
- ' /~https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md'
- /~https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md
Tags:
- UCOREW64.SYS
Expand Down
1 change: 0 additions & 1 deletion yaml/a66d0413-cc82-4f1e-bcf1-0dcf9d79f6c0.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -155,7 +155,6 @@ KnownVulnerableSamples:
LoadsDespiteHVCI: 'FALSE'
MitreID: T1068
Resources:
- ' /~https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md'
- /~https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md
Tags:
- BS_HWMIO64_W10.sys
Expand Down
1 change: 0 additions & 1 deletion yaml/aaa92ef1-5728-4e15-9fca-b054b02f0fb0.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -148,7 +148,6 @@ KnownVulnerableSamples:
LoadsDespiteHVCI: 'FALSE'
MitreID: T1068
Resources:
- ' /~https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md'
- /~https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md
Tags:
- piddrv64.sys
Expand Down
1 change: 0 additions & 1 deletion yaml/be3e49ea-095e-4fdb-9529-f4c2dbb9a9fc.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -186,7 +186,6 @@ KnownVulnerableSamples:
LoadsDespiteHVCI: 'FALSE'
MitreID: T1068
Resources:
- ' /~https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md'
- /~https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md
Tags:
- PhlashNT.sys
Expand Down
5 changes: 2 additions & 3 deletions yaml/c3cca618-5a7f-4a51-8785-cb328fbfb0df.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -256,9 +256,8 @@ KnownVulnerableSamples:
LoadsDespiteHVCI: 'FALSE'
MitreID: T1068
Resources:
- ' /~https://github.com/jbaines-r7/dellicious'
- ' https://www.rapid7.com/blog/post/2021/12/13/driver-based-attacks-past-and-present/'
- /~https://github.com/jbaines-r7/dellicious and https://www.rapid7.com/blog/post/2021/12/13/driver-based-attacks-past-and-present/
- /~https://github.com/jbaines-r7/dellicious
- https://www.rapid7.com/blog/post/2021/12/13/driver-based-attacks-past-and-present/
Tags:
- viraglt64.sys
- viragt64.sys
Expand Down
1 change: 0 additions & 1 deletion yaml/ca768fc5-9b5c-4ced-90ab-fd6be9a70199.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -297,7 +297,6 @@ KnownVulnerableSamples:
LoadsDespiteHVCI: 'FALSE'
MitreID: T1068
Resources:
- ' https://gist.github.com/k4nfr3/af970e7facb09195e56f2112e1c9549c'
- https://gist.github.com/k4nfr3/af970e7facb09195e56f2112e1c9549c
Tags:
- amp.sys
Expand Down
1 change: 0 additions & 1 deletion yaml/d158321b-4d56-49c5-9a18-bcff9f4a2ebe.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -178,7 +178,6 @@ KnownVulnerableSamples:
LoadsDespiteHVCI: 'FALSE'
MitreID: T1068
Resources:
- ' /~https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md'
- /~https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md
Tags:
- BS_HWMIo64.sys
Expand Down
1 change: 0 additions & 1 deletion yaml/d2806397-9ceb-47c8-b5f3-3aabec182ff5.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -353,7 +353,6 @@ KnownVulnerableSamples:
LoadsDespiteHVCI: 'FALSE'
MitreID: T1068
Resources:
- ' /~https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md'
- /~https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md
Tags:
- NCHGBIOS2x64.SYS
Expand Down
1 change: 0 additions & 1 deletion yaml/d55a5955-6220-4f38-ba7d-91339330fe98.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -1268,7 +1268,6 @@ KnownVulnerableSamples:
LoadsDespiteHVCI: 'FALSE'
MitreID: T1068
Resources:
- ' /~https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md'
- /~https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md
Tags:
- nvflash.sys
Expand Down
1 change: 0 additions & 1 deletion yaml/d64167b6-f281-41d8-9535-6cb925e77aec.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -123,7 +123,6 @@ KnownVulnerableSamples:
LoadsDespiteHVCI: 'FALSE'
MitreID: T1068
Resources:
- ' https://gist.github.com/k4nfr3/af970e7facb09195e56f2112e1c9549c'
- /~https://github.com/hfiref0x/KDU/releases/tag/v1.2.0
- https://gist.github.com/k4nfr3/af970e7facb09195e56f2112e1c9549c
Tags:
Expand Down
1 change: 0 additions & 1 deletion yaml/d9f2c3d6-160c-4eb3-8547-894fcf810342.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -221,7 +221,6 @@ KnownVulnerableSamples:
LoadsDespiteHVCI: 'FALSE'
MitreID: T1068
Resources:
- ' /~https://github.com/Chigusa0w0/AsusDriversPrivEscala'
- /~https://github.com/Chigusa0w0/AsusDriversPrivEscala
Tags:
- driver7-x86-withoutdbg.sys
Expand Down
1 change: 0 additions & 1 deletion yaml/de4dd27a-1f7e-4271-98a4-55395ab6aabf.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -190,7 +190,6 @@ KnownVulnerableSamples:
LoadsDespiteHVCI: 'FALSE'
MitreID: T1068
Resources:
- ' /~https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md'
- /~https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md
Tags:
- BS_I2c64.sys
Expand Down
1 change: 0 additions & 1 deletion yaml/e299b0b6-e5e2-45b3-bf0b-c008068cebfa.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -135,7 +135,6 @@ KnownVulnerableSamples:
LoadsDespiteHVCI: 'FALSE'
MitreID: T1068
Resources:
- ' /~https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md'
- /~https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md
Tags:
- BS_Flash64.sys
Expand Down
1 change: 0 additions & 1 deletion yaml/e4098d7e-78b3-4da1-96cb-68b27f245e02.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -246,7 +246,6 @@ KnownVulnerableSamples:
LoadsDespiteHVCI: 'TRUE'
MitreID: T1068
Resources:
- ' /~https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md'
- /~https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md
Tags:
- HwOs2Ec7x64.sys
Expand Down
5 changes: 2 additions & 3 deletions yaml/e7c958da-fd5d-40d6-975e-582c6fee7f69.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -155,10 +155,9 @@ KnownVulnerableSamples:
LoadsDespiteHVCI: 'FALSE'
MitreID: T1068
Resources:
- ' /~https://github.com/jbaines-r7/dellicious'
- ' https://www.rapid7.com/blog/post/2021/12/13/driver-based-attacks-past-and-present/'
- /~https://github.com/jbaines-r7/dellicious
- https://www.rapid7.com/blog/post/2021/12/13/driver-based-attacks-past-and-present/
- /~https://github.com/elastic/protections-artifacts/blob/932baf346cc8a743f1963ad3d4565b42ed17bebe/yara/rules/Windows_VulnDriver_Biostar.yar#L54
- /~https://github.com/jbaines-r7/dellicious and https://www.rapid7.com/blog/post/2021/12/13/driver-based-attacks-past-and-present/
Tags:
- BS_RCIO64.sys
Verified: 'TRUE'

0 comments on commit 252e731

Please sign in to comment.