Skip to content

Commit cdc3fb3

Browse files
github-actions[bot]github-actions[bot]
committed
chore: update feeds 2026-10-05
1 parent f6baf98 commit cdc3fb3

11 files changed

Lines changed: 21035 additions & 21035 deletions

‎feeds/elastic_threat_intel.ndjson‎

Lines changed: 2152 additions & 2152 deletions
Large diffs are not rendered by default.

‎feeds/extsentry_feed.json‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"feed_name": "ExtSentry - Browser Extension Threat Intelligence",
33
"feed_version": "1.0",
4-
"generated": "2026-10-04T21:56:12Z",
4+
"generated": "2026-10-05T00:24:52Z",
55
"source": "https://github.com/mthcht/awesome-lists",
66
"license": "TLP:CLEAR",
77
"total_indicators": 2152,

‎feeds/extsentry_ioc_feed.csv‎

Lines changed: 2152 additions & 2152 deletions
Large diffs are not rendered by default.

‎feeds/misp_event.json‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -4,8 +4,8 @@
44
"threat_level_id": "2",
55
"analysis": "2",
66
"distribution": "3",
7-
"date": "2026-10-04",
8-
"timestamp": "1791150972",
7+
"date": "2026-10-05",
8+
"timestamp": "1791159893",
99
"published": false,
1010
"uuid": "41ef2090-fab5-547e-9eb6-2aa8f195c66f",
1111
"Orgc": {

‎feeds/misp_warninglist.json‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
{
22
"name": "ExtSentry - Known Malicious/Suspicious Browser Extension IDs",
3-
"version": 20261004,
3+
"version": 20261005,
44
"description": "List of known malicious, suspicious, and potentially unwanted browser extension IDs. Maintained by mthcht.",
55
"type": "string",
66
"matching_attributes": [

‎feeds/opencti_import.csv‎

Lines changed: 2152 additions & 2152 deletions
Large diffs are not rendered by default.

‎feeds/openioc_browser_extensions.ioc‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,8 +1,8 @@
11
<?xml version="1.0" ?>
2-
<ioc xmlns="http://schemas.mandiant.com/2010/ioc" id="3678fd2f-03b8-5532-a002-c96e7c7abd1e" last-modified="2026-10-04T21:56:12Z">
2+
<ioc xmlns="http://schemas.mandiant.com/2010/ioc" id="3678fd2f-03b8-5532-a002-c96e7c7abd1e" last-modified="2026-10-05T00:24:52Z">
33
<short_description>ExtSentry - Malicious Browser Extension IOCs</short_description>
44
<description>Browser extension IDs flagged as malicious/suspicious. Matches extension IDs in file paths and registry entries. Source: github.com/mthcht/awesome-lists</description>
5-
<authored_date>2026-10-04T21:56:12Z</authored_date>
5+
<authored_date>2026-10-05T00:24:52Z</authored_date>
66
<definition>
77
<Indicator operator="OR" id="5fd27988-48b0-53ea-88c2-7e57099fd433">
88
<IndicatorItem id="90736783-800e-528c-a6c5-80425b19e5dd" condition="contains">

‎feeds/sentinel_analytics_rule.kql‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
// ExtSentry - Browser Extension Threat Detection for Microsoft Sentinel
22
// Source: https://github.com/mthcht/awesome-lists
3-
// Generated: 2026-10-04T21:56:12Z
3+
// Generated: 2026-10-05T00:24:52Z
44
// Total extension IDs: 2152 in 11 chunks
55
//
66
// RECOMMENDATION: For production, import the IOC list as a Sentinel Watchlist

‎feeds/sigma_rules_browser_extensions.yml‎

Lines changed: 30 additions & 30 deletions
Original file line numberDiff line numberDiff line change
@@ -8,8 +8,8 @@ description: |
88
references:
99
- https://github.com/mthcht/awesome-lists
1010
author: ExtSentry / mthcht
11-
date: 2026-10-04
12-
modified: 2026-10-04
11+
date: 2026-10-05
12+
modified: 2026-10-05
1313
tags:
1414
- attack.persistence
1515
- attack.t1176
@@ -2187,8 +2187,8 @@ description: |
21872187
references:
21882188
- https://github.com/mthcht/awesome-lists
21892189
author: ExtSentry / mthcht
2190-
date: 2026-10-04
2191-
modified: 2026-10-04
2190+
date: 2026-10-05
2191+
modified: 2026-10-05
21922192
tags:
21932193
- attack.persistence
21942194
- attack.t1176
@@ -4365,8 +4365,8 @@ description: |
43654365
references:
43664366
- https://github.com/mthcht/awesome-lists
43674367
author: ExtSentry / mthcht
4368-
date: 2026-10-04
4369-
modified: 2026-10-04
4368+
date: 2026-10-05
4369+
modified: 2026-10-05
43704370
tags:
43714371
- attack.persistence
43724372
- attack.t1176
@@ -6540,8 +6540,8 @@ description: Detects browser extensions categorized as 'malware' in the ExtSentr
65406540
references:
65416541
- https://github.com/mthcht/awesome-lists
65426542
author: ExtSentry / mthcht
6543-
date: 2026-10-04
6544-
modified: 2026-10-04
6543+
date: 2026-10-05
6544+
modified: 2026-10-05
65456545
tags:
65466546
- attack.persistence
65476547
- attack.t1176
@@ -8489,8 +8489,8 @@ description: Detects browser extensions categorized as 'PUP' in the ExtSentry fe
84898489
references:
84908490
- https://github.com/mthcht/awesome-lists
84918491
author: ExtSentry / mthcht
8492-
date: 2026-10-04
8493-
modified: 2026-10-04
8492+
date: 2026-10-05
8493+
modified: 2026-10-05
84948494
tags:
84958495
- attack.persistence
84968496
- attack.t1176
@@ -8519,8 +8519,8 @@ description: Detects browser extensions categorized as 'PROXY/VPN' in the ExtSen
85198519
references:
85208520
- https://github.com/mthcht/awesome-lists
85218521
author: ExtSentry / mthcht
8522-
date: 2026-10-04
8523-
modified: 2026-10-04
8522+
date: 2026-10-05
8523+
modified: 2026-10-05
85248524
tags:
85258525
- attack.persistence
85268526
- attack.t1176
@@ -8559,8 +8559,8 @@ description: Detects browser extensions categorized as 'compromised' in the ExtS
85598559
references:
85608560
- https://github.com/mthcht/awesome-lists
85618561
author: ExtSentry / mthcht
8562-
date: 2026-10-04
8563-
modified: 2026-10-04
8562+
date: 2026-10-05
8563+
modified: 2026-10-05
85648564
tags:
85658565
- attack.persistence
85668566
- attack.t1176
@@ -8674,8 +8674,8 @@ description: Detects browser extensions categorized as 'cryptocurrency' in the E
86748674
references:
86758675
- https://github.com/mthcht/awesome-lists
86768676
author: ExtSentry / mthcht
8677-
date: 2026-10-04
8678-
modified: 2026-10-04
8677+
date: 2026-10-05
8678+
modified: 2026-10-05
86798679
tags:
86808680
- attack.persistence
86818681
- attack.t1176
@@ -8787,8 +8787,8 @@ description: Detects browser extensions categorized as 'Credential Access' in th
87878787
references:
87888788
- https://github.com/mthcht/awesome-lists
87898789
author: ExtSentry / mthcht
8790-
date: 2026-10-04
8791-
modified: 2026-10-04
8790+
date: 2026-10-05
8791+
modified: 2026-10-05
87928792
tags:
87938793
- attack.persistence
87948794
- attack.t1176
@@ -8812,8 +8812,8 @@ description: Detects browser extensions categorized as 'Defense Evasion' in the
88128812
references:
88138813
- https://github.com/mthcht/awesome-lists
88148814
author: ExtSentry / mthcht
8815-
date: 2026-10-04
8816-
modified: 2026-10-04
8815+
date: 2026-10-05
8816+
modified: 2026-10-05
88178817
tags:
88188818
- attack.persistence
88198819
- attack.t1176
@@ -8836,8 +8836,8 @@ description: Detects browser extensions categorized as 'scam' in the ExtSentry f
88368836
references:
88378837
- https://github.com/mthcht/awesome-lists
88388838
author: ExtSentry / mthcht
8839-
date: 2026-10-04
8840-
modified: 2026-10-04
8839+
date: 2026-10-05
8840+
modified: 2026-10-05
88418841
tags:
88428842
- attack.persistence
88438843
- attack.t1176
@@ -8864,8 +8864,8 @@ description: Detects browser extensions categorized as 'RMM' in the ExtSentry fe
88648864
references:
88658865
- https://github.com/mthcht/awesome-lists
88668866
author: ExtSentry / mthcht
8867-
date: 2026-10-04
8868-
modified: 2026-10-04
8867+
date: 2026-10-05
8868+
modified: 2026-10-05
88698869
tags:
88708870
- attack.persistence
88718871
- attack.t1176
@@ -8889,8 +8889,8 @@ description: Detects browser extensions categorized as 'password manager' in the
88898889
references:
88908890
- https://github.com/mthcht/awesome-lists
88918891
author: ExtSentry / mthcht
8892-
date: 2026-10-04
8893-
modified: 2026-10-04
8892+
date: 2026-10-05
8893+
modified: 2026-10-05
88948894
tags:
88958895
- attack.persistence
88968896
- attack.t1176
@@ -8921,8 +8921,8 @@ description: Detects browser extensions categorized as 'metadata_category' in th
89218921
references:
89228922
- https://github.com/mthcht/awesome-lists
89238923
author: ExtSentry / mthcht
8924-
date: 2026-10-04
8925-
modified: 2026-10-04
8924+
date: 2026-10-05
8925+
modified: 2026-10-05
89268926
tags:
89278927
- attack.persistence
89288928
- attack.t1176
@@ -8947,8 +8947,8 @@ description: |
89478947
references:
89488948
- https://github.com/mthcht/awesome-lists
89498949
author: ExtSentry
8950-
date: 2026-10-04
8951-
modified: 2026-10-04
8950+
date: 2026-10-05
8951+
modified: 2026-10-05
89528952
tags:
89538953
- attack.persistence
89548954
- attack.t1176

0 commit comments

Comments
 (0)