Skip to content

Have extract-base64 also look at System 7045 events #1583

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
YamatoSecurity opened this issue Feb 15, 2025 · 1 comment · Fixed by #1585
Closed

Have extract-base64 also look at System 7045 events #1583

YamatoSecurity opened this issue Feb 15, 2025 · 1 comment · Fixed by #1585
Assignees
@fukusuket
Labels
enhancement New feature or request
Milestone
3.1 (2025/2/22 Ni...

Comments

@YamatoSecurity
Copy link
Collaborator

@fukusuket Could you make the extract-base64 command also look at System 7045 (Service creation) events? Lots of malware will put base64 encoded payloads here so I think this is a good event to add.
@YamatoSecurity YamatoSecurity added the enhancement New feature or request label Feb 15, 2025
@fukusuket
Copy link
Collaborator

fukusuket commented Feb 15, 2025 •
edited
Loading

Sounds good! I will add it!💪

@fukusuket fukusuket mentioned this issue Feb 15, 2025
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@fukusuket fukusuket

Labels
enhancement New feature or request
Projects
None yet
Milestone
3.1 (2025/2/22 Ninja Day)
Development

Successfully merging a pull request may close this issue.

feat: add system 7045 to extract-base64 Yamato-Security/hayabusa
2 participants
@fukusuket @YamatoSecurity