├── CONTRIBUTING.md ├── DISCLAIMER.md ├── LICENSE.md ├── LogCheck.ps1 ├── LogCheck.py ├── README.md ├── anomolous_uris.splunk.txt ├── core.webshell_detection.yara ├── core.yara.bin ├── dirChecker.ps1 ├── extended.webshell_detection.yara ├── extended.yara.bin ├── hips_file_integrity_rules.txt └── network_signatures.snort.txt /CONTRIBUTING.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nsacyber/Mitigating-Web-Shells/HEAD/CONTRIBUTING.md -------------------------------------------------------------------------------- /DISCLAIMER.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nsacyber/Mitigating-Web-Shells/HEAD/DISCLAIMER.md -------------------------------------------------------------------------------- /LICENSE.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nsacyber/Mitigating-Web-Shells/HEAD/LICENSE.md -------------------------------------------------------------------------------- /LogCheck.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nsacyber/Mitigating-Web-Shells/HEAD/LogCheck.ps1 -------------------------------------------------------------------------------- /LogCheck.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nsacyber/Mitigating-Web-Shells/HEAD/LogCheck.py -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nsacyber/Mitigating-Web-Shells/HEAD/README.md -------------------------------------------------------------------------------- /anomolous_uris.splunk.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nsacyber/Mitigating-Web-Shells/HEAD/anomolous_uris.splunk.txt -------------------------------------------------------------------------------- /core.webshell_detection.yara: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nsacyber/Mitigating-Web-Shells/HEAD/core.webshell_detection.yara -------------------------------------------------------------------------------- /core.yara.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nsacyber/Mitigating-Web-Shells/HEAD/core.yara.bin -------------------------------------------------------------------------------- /dirChecker.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nsacyber/Mitigating-Web-Shells/HEAD/dirChecker.ps1 -------------------------------------------------------------------------------- /extended.webshell_detection.yara: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nsacyber/Mitigating-Web-Shells/HEAD/extended.webshell_detection.yara -------------------------------------------------------------------------------- /extended.yara.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nsacyber/Mitigating-Web-Shells/HEAD/extended.yara.bin -------------------------------------------------------------------------------- /hips_file_integrity_rules.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nsacyber/Mitigating-Web-Shells/HEAD/hips_file_integrity_rules.txt -------------------------------------------------------------------------------- /network_signatures.snort.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nsacyber/Mitigating-Web-Shells/HEAD/network_signatures.snort.txt --------------------------------------------------------------------------------