Feathers comments

Repositories
Issues
Comments

Results 3 comments of


                                            Feathers

Create vftrace.yml

@wietze Perhaps another folder needs to be added for CyberArk vendor since the checks failed as unknown vendor. Please correct me if I understood this wrong and there is some...

Create net_dns_cdn_cobaltstrike.yml

For environments where fastly.net is heavily used unfortunately this may not be considered an IOC, however an CDN with 6 subdomains was rarely seen, hence my suggestion for detection creation

Added the string corresponding to "{"alg":" since some token headers start with this

> > From my hunts I observed JWT tokens starting with "typ" either "alg", hence added the corresponding base64 string missing from the detection > > For reviewing and testing...