ThreatHunting-Keywords

February and March 2024 updates

• 144 tools updated
• 30513 detection patterns
• WebSite: https://mthcht.github.io/ThreatHunting-Keywords/
• Individual Tool Lists: https://github.com/mthcht/ThreatHunting-Keywords/tree/main/tools
• Yara Rules: https://github.com/mthcht/ThreatHunting-Keywords-yara-rules
• Specific Artifact Lists Updated: https://github.com/mthcht/awesome-lists/tree/main/Lists

more details on each tool added in the next releases...

First release contributors details of https://github.com/mthcht/ThreatHunting-Keywords

Contributors

• @wikijm made their first contribution in mthcht/ThreatHunting-Keywords#4
• @Ekitji made their first contribution in mthcht/ThreatHunting-Keywords#9

Contributors updates since the publication

• Update README.md by @wikijm in mthcht/ThreatHunting-Keywords#4
• Update th_keywords_processnames_elk.txt by @Ekitji in mthcht/ThreatHunting-Keywords#9
• striped version of suspicious_http_user_agents_list.csv with only focus on non bots by @Ekitji in mthcht/ThreatHunting-Keywords#10
• Update README.md by @Ekitji in mthcht/ThreatHunting-Keywords#11
• Update user_agent_elk.txt by @Ekitji in mthcht/ThreatHunting-Keywords#12
• Update suspicious_named_pipe_elk.txt by @Ekitji in mthcht/ThreatHunting-Keywords#13
• fixed some issues with numbs and so on by @Ekitji in mthcht/ThreatHunting-Keywords#14
• minor adjustments by @Ekitji in mthcht/ThreatHunting-Keywords#15
• Update th_keywords_processnames_elk.txt by @Ekitji in mthcht/ThreatHunting-Keywords#16
• Update user_agent_elk.txt by @Ekitji in mthcht/ThreatHunting-Keywords#17
• some additions and updates by @Ekitji in mthcht/ThreatHunting-Keywords#18
• Adding AnyDesk.exe previous version (file named 'previous-version') by @wikijm in mthcht/ThreatHunting-Keywords#21