Mitigating-Web-Shells

Mitigating-Web-Shells copied to clipboard

LogCheck.py Traceback (most recent call last): File "LogCheck.py.2", line 111, in analyze_weblog(weblogfileName) File "LogCheck.py.2", line 40, in analyze_weblog user_agent = row[apachelogsfields.index('user_agent')] IndexError: list index out of range Logfile : wc...

mauser8004

Add more webshell YARA rules

1

From https://github.com/ruppde/yara_rules#webshells

ruppde

Old link lead to broken page. ``` {0}404 Not FoundThe requested Url does not return any valid content.AdministratorsChange this message by configuring a specific 404 Error Page or Url for...

The-Real-Thisas

https://github.com/nsacyber/Mitigating-Web-Shells#powershell-script-to-identify-sysmon-entries-for-iis Please fix typo: Get-WinEvent -FilterHashtable @{logname="**Micorosft**-Windows-Sysmon/Operational";id=1;} | Where {$_.message -like "*ParentImage: C:\Windows\System32\inetsrv\w3wp.exe*"} | %{$_.properties[4]} | Sort-Object -Property value -Unique Corrected (Microsoft) Get-WinEvent -FilterHashtable @{logname="Microsoft-Windows-Sysmon/Operational";id=1;} | Where {$_.message -like "*ParentImage:...

danfoxley