Skip to content

Actions: LasCC/SentinelOne-Userscript

Actions

All workflows

Actions

Loading...
Loading

Showing runs from all workflows
24 workflow runs
24 workflow runs

Filter by Workflow

⌥ + click/return to exclude

Filter by Event

⌥ + click/return to exclude

Filter by Status

⌥ + click/return to exclude

Filter by Branch

⌥ + click/return to exclude

Filter by Actor

⌥ + click/return to exclude
add clickfix term ttp Release #24: Commit 377ca04 pushed by LasCC
13s master
master
13s
UI color-coding/search/copy + rename for click-to-install Release #23: Commit ec96465 pushed by LasCC
12s master
master
12s
userscript: caching, perf, arrow-key nav, loading-state fix Release #22: Commit f99572f pushed by LasCC
14s master
master
14s
new rules Release #21: Commit 89fdac8 pushed by LasCC
20s master
master
20s
bigint ttp https://ludovic-coulon.com/blog/malware-analysis-clickfix-… Release #20: Commit afd6b5d pushed by LasCC
16s master
master
16s
feat: add Cloud Storage Exfiltration Domain Hits rule, fix ScreenConn… Release #19: Commit 06e233c pushed by LasCC
22s master
master
22s
feat: add Newly Observed ScreenConnect Host Server rule under Command… Release #18: Commit 9e8b34b pushed by LasCC
13s master
master
13s
feat: add Attrib.exe hidden files rule under Defense Evasion Release #17: Commit 046d09a pushed by LasCC
13s master
master
13s
feat: add RedSun Windows Defender 0-day (CVE-2026-33825) detection rule Release #16: Commit 2e3f903 pushed by LasCC
8s master
master
8s
feat: add ClickFix TTP (Verbose) as separate rule, restore original C… Release #15: Commit 22a68a5 pushed by LasCC
13s master
master
13s
feat: expand ClickFix detection with 2024-2026 variants (FileFix, Web… Release #14: Commit b840584 pushed by LasCC
11s master
master
11s
fix: use correct endpoint.os value "osx" for macOS queries Release #13: Commit cb48e92 pushed by LasCC
10s master
master
10s
feat: add macOS LOOBins detection query (16 high-confidence patterns … Release #12: Commit bf42012 pushed by LasCC
12s master
master
12s
feat: add Ligolo-ng and Ligolo-IWA browser pivot detection query Release #11: Commit 4e9db7c pushed by LasCC
9s master
master
9s
fix: drop ambiguous option chars (dashes) from ArgFuscator detection … Release #10: Commit 68c4537 pushed by LasCC
13s master
master
13s
fix: comprehensive ArgFuscator detection covering all 5 obfuscation f… Release #9: Commit f4109c5 pushed by LasCC
11s master
master
11s
feat: add ArgFuscator command-line obfuscation detection query (T1027… Release #8: Commit 85b280c pushed by LasCC
10s master
master
10s
fix: add ClickFix alias evasion detection and rework Storyline ID hel… Release #7: Commit f6b07cd pushed by LasCC
14s master
master
14s
fix: rework indicator.metadata/description aggregation for readabilit… Release #6: Commit bc62d87 pushed by LasCC
12s master
master
12s
Update s1_powerquery_hunting.json Release #5: Commit 7a6eb04 pushed by LasCC
9s master
master
9s
docs: add cross-promotion badge for MicrosoftSentinel-Userscript Release #4: Commit 8abb1c0 pushed by LasCC
12s master
master
12s
fix: update the suspicious hostname query Release #3: Commit 4228787 pushed by LasCC
13s master
master
13s
Update userscript metadata URLs and bump version Release #2: Commit 0fbd4cb pushed by LasCC
9s master
master
9s
Add GitHub Actions release pipeline Release #1: Commit 9aa03bb pushed by LasCC
12s master
master
12s