Releases: FourCoreLabs/EDRHunt
Releases · FourCoreLabs/EDRHunt
v1.4.4
Changelog
- 22ec337 updated and removed generic signatures (#14)
v1.4.3
Changelog
- 65507a7 fix: update Go to 1.19
- 8ef2a72 fix: update limacharlie detection to use rphcp (#12)
- e36956d Merge pull request #11 from FourCoreLabs/feat-limacharlie
- c0600ae Update README.md
- 66c637a feat: add limacharlie edr scan
v1.4.2
This release adds various new EDR Detections as well as detections based on AV providers via WMI.
New Detections
- CybereasonEDR
- BitDefenderEDR
- CheckPointEDR
- CynetEDR
- DeepInstinctEDR
- SophosEDR
- FortinetEDR
- MalwareBytesEDR
v1.4.1
Changelog
- 763a84e Merge pull request #10 from FourCoreLabs/new-edrs
- 63b5877 Added new edr signatures and updated old signatures
v1.4.0
Changelog
- 28770e4 Merge pull request #9 from FourCoreLabs/qualys-trend
- 19a27b5 Added WMI AV Support
v1.3.2
Changelog
- 35fd0fb fix: use latest fork of wmi
v1.3.1
Changelog
- 2b21df7 Merge branch 'master' of github.com:FourCoreLabs/edrRecon into master
- 03c04cf fix: use correct crowdstrike key
- 696bd98 Update README.md
- a9df290 Update README.md
v1.3
Changelog
- d2ee597 feat: add elastic endpoint rule (#8)
- 6d8f554 refactor: restructure code into packages (#7)
- a8be3f2 fix: add windows build flag in filechecker
- 542bd6c fix: add os-specific build flags on files
- 7c57031 fix: return nil in CheckService; remove global var err error (#6)
v1.2
Changelog
aae7549 v1.2
aee3b1e updated csc, readme
9a69d73 Merge pull request #5 from FourCoreLabs/refactor-check-errors
e4fd639 fix: add EDR full form
5fd99b5 refactor: pass errors via multierror, pass context in CheckRegistry
89f1564 Merge pull request #4 from FourCoreLabs/fix-remove-struct
f871c7b refactor: move scanners to pkg/edrRecon
41286d7 doc: add comments; fix: remove edrhunt struct
3393818 Update README.md
69da0b4 fix: use len() instead of cap()