Detect-It-Easy

mirrors/Detect-It-Easy

Fork 0

mirror of https://github.com/horsicq/Detect-It-Easy.git synced 2026-06-24 01:54:08 +00:00

Commit graph

4ff9abd380 Add GrabFiles and StealFiles to heuristic signs DosX 2026-06-14 18:51:02 +03:00
66641fb85f Improve Nvidia DLSS regex and add Nvidia NTC rule DosX 2026-06-14 18:50:54 +03:00
bf2f69c527 add 8.38 to Digital Mars signature Benjamin Funke 2026-06-13 08:47:07 +02:00
4496a8a8bc dbs_min update DosX 2026-06-13 02:37:56 +03:00
7f564a0834 Improve heuristic signatures and add detections DosX 2026-06-13 02:36:19 +03:00
500105925a Heuristics: add paths and refactor stealer checks DosX 2026-06-12 22:05:21 +03:00
46a84cb7a5 dbs_min update DosX 2026-06-12 13:14:30 +03:00
b131106437 Prefix MSDOS DB filenames by type DosX 2026-06-12 13:14:19 +03:00
d4928d2f41 Update heuristic signatures for browsers and IM apps DosX 2026-06-12 13:04:04 +03:00
53315c082b dbs_min update DosX 2026-06-12 00:57:41 +03:00
113d05014a Add rule aliases for wallet heuristics DosX 2026-06-12 00:56:47 +03:00
200b13fdc3 Add Firefox and crypto patterns to heuristics DosX 2026-06-12 00:48:13 +03:00
cc4a926e8e Heuristics: add IMVU & registry/key tweaks DosX 2026-06-12 00:28:04 +03:00
01efc93fa5 Normalize and expand heuristic strings DosX 2026-06-12 00:12:46 +03:00
f6b0c34fa5 dbs_min update DosX 2026-06-12 00:01:43 +03:00
117addfc61 Expand and normalize heuristic detection strings DosX 2026-06-12 00:01:28 +03:00
9249ab795b Refactor RAT checks and expand signature groups DosX 2026-06-11 23:20:27 +03:00
3027d21793 Enhance heuristic signatures for apps and wallets DosX 2026-06-11 16:14:51 +03:00
f33e17d943 Cap risk counter and adjust risk score calc DosX 2026-06-11 15:56:34 +03:00
8d43c7efa9 dbs_min update DosX 2026-06-11 15:07:17 +03:00
21ddb860fb Adjust heuristic rules, detection threshold and scoring DosX 2026-06-11 15:07:08 +03:00
24e699a444 dbs_min update DosX 2026-06-11 01:53:52 +03:00
eb2d4647f2 Improve heuristic scan logic and update signatures DosX 2026-06-11 01:53:23 +03:00
f6eb0347f1 Normalize scan string formatting and add aliases DosX 2026-06-11 01:38:26 +03:00
ac294b595e Merge branch 'master' of https://github.com/horsicq/Detect-It-Easy DosX 2026-06-11 01:10:18 +03:00
b5dfeb9672 Enhance VM detection and add '*.txt' indicator DosX 2026-06-11 01:10:13 +03:00
cbff3c4c83 add QT6 Fedora build instructions Benjamin Funke 2026-06-10 22:11:44 +02:00
0601364671 dbs_min update DosX 2026-06-10 22:13:24 +03:00
ff00536c61 Reformat string arrays in PE heuristic script DosX 2026-06-10 22:12:43 +03:00
badceb8e4d Detect Proxifier and card_number_encrypted DosX 2026-06-10 22:04:19 +03:00
a7a006b3da Fedora Qt6 Build LFriede 2026-06-10 20:50:21 +02:00
3bd656f50a Enhance VPN and wallet detection rules DosX 2026-06-10 21:45:27 +03:00
69fbef3d49 Add cryptowallet extension IDs to heuristic DB DosX 2026-06-10 21:37:01 +03:00
b0650c8278 dbs_min update DosX 2026-06-10 21:17:22 +03:00
e75a3dab4a Refactor sign groups detection and extend checks DosX 2026-06-10 21:05:38 +03:00
f9f6a460d2 Merge branch 'master' of https://github.com/horsicq/Detect-It-Easy DosX 2026-06-10 20:44:19 +03:00
8edb9e3bc7 Enhance PE heuristic detection strings DosX 2026-06-10 20:44:15 +03:00
bff0cefc4a add SensAPI signature Benjamin Funke 2026-06-10 18:47:18 +02:00
1cb5d3f645 Add CMSNMessengerPasswords to MSN heuristic DosX 2026-06-10 17:40:47 +03:00
079c6cd0b0 Detect additional Movfuscator signature DosX 2026-06-10 17:40:25 +03:00
6164082738 Update PE heuristics: Firefox queries and new strings DosX 2026-06-10 12:09:22 +03:00
d92f5650f5 dbs_min update DosX 2026-06-10 11:40:56 +03:00
54fbc6b158 Enhance PE heuristic signatures and .NET checks DosX 2026-06-10 10:26:15 +03:00
c22407cd2c Add extra Firefox and Opera data strings DosX 2026-06-09 01:06:13 +03:00
95e2a569a0 dbs_min update DosX 2026-06-09 00:53:30 +03:00
f004710a03 Add password/cookie checks and adjust detection names DosX 2026-06-09 00:52:59 +03:00
59505262ef Expand PE heuristics for Firefox, Yahoo, GameKeys DosX 2026-06-09 00:46:52 +03:00
c07cb51eb2 Add FlashFXP/SmartFTP and tweak heuristics DosX 2026-06-09 00:25:26 +03:00
49037752e2 Add IE password alias and taskmgr heuristic DosX 2026-06-09 00:15:56 +03:00
e6b40f9a3c Update heuristic strings for wallets and Steam DosX 2026-06-08 23:15:05 +03:00
7d5406adf5 Expand credential and Firefox heuristics DosX 2026-06-08 22:56:09 +03:00
c2e92adb95 Add group-based stealer detection DosX 2026-06-08 21:27:32 +03:00
6462379ab2 Handle falsy instruction in getAsmOpCode DosX 2026-06-08 21:25:23 +03:00
3ff9b61f69 Add XerinFuscator .xerin signature DosX 2026-06-08 01:26:52 +03:00
acc91b17fb Refactor XerinFuscator detection and add getVersion DosX 2026-06-08 01:23:31 +03:00
ec3a3cc0cb Add XerinFuscator detection and metadata DosX 2026-06-07 18:46:21 +03:00
e5e463101a Don't flag 'no init' for DLLs DosX 2026-06-07 02:04:48 +03:00
8f59b01213 Add nAvgBytesPerSec check for Imminent RAT DosX 2026-06-06 22:02:21 +03:00
a86b67a410 Detect RevengeRAT via 'Nuclear Explosion' name DosX 2026-06-06 21:54:31 +03:00
bd8df5c931 Refactor Makeself signature and detection logic DosX 2026-06-06 21:19:35 +03:00
9f7255ffe0 style: auto-format JavaScript files in db directories github-actions[bot] 2026-06-05 19:09:58 +00:00
bc30073017

Merge pull request #361 from 6eh01der/patch-1 Hors 2026-06-05 21:09:29 +02:00
0665d02704 Update BeRoEXEPacker detection patterns DosX 2026-06-05 21:17:06 +03:00
ae76ada90c dbs_min update DosX 2026-06-05 21:03:55 +03:00
be59ae73dc Improve BeRoEXEPacker detection DosX 2026-06-05 21:03:28 +03:00
988b3de0b7

Update sfx_Makeself.1.sg Artur Lebedev 2026-06-05 14:05:14 +03:00
0e6f1adfaa Add Echelon Stealer heuristic detection DosX 2026-06-05 13:11:36 +03:00
558f2bb61c

Update sfx_Makeself.1.sg Artur Lebedev 2026-06-05 12:03:47 +03:00
bd4083e9fe

Update sfx_Makeself.1.sg Artur Lebedev 2026-06-05 11:59:50 +03:00
f24a678c4c

Update sfx_Makeself.1.sg Artur Lebedev 2026-06-05 11:46:35 +03:00
ea8d1d4400 dbs_min update DosX 2026-06-05 02:37:17 +03:00
8aadec1a09 Sanitize version and product name strings DosX 2026-06-05 02:37:06 +03:00
367ed3423a Detect Orcus RAT via .orcusInstallation string DosX 2026-06-05 02:27:36 +03:00
aaf7f102af Merge branch 'master' of https://github.com/horsicq/Detect-It-Easy DosX 2026-06-05 02:21:27 +03:00
2cf6dce238 Add Ramnit/Parite signatures and tidy Themida DosX 2026-06-05 02:21:25 +03:00
095ab8a6a9

Update sfx_Makeself.1.sg Artur Lebedev 2026-06-04 17:02:23 +03:00
5ac04060ea

Create sfx_Makeself.1.sg Artur Lebedev 2026-06-04 16:55:56 +03:00
f2a0884014 add Rockall Heap Manager signature Benjamin Funke 2026-06-04 11:56:58 +02:00
f001d35258 Merge branch 'master' of https://github.com/horsicq/Detect-It-Easy DosX 2026-06-03 20:40:53 +03:00
270cddfb14 Format ASF rule and refine Parite heuristic DosX 2026-06-03 20:39:38 +03:00
8d07b592b2

Update changelog for version 3.22 Benjamin Funke 2026-06-03 18:31:54 +02:00
1f67f6f893 Merge branch 'master' of https://github.com/horsicq/Detect-It-Easy DosX 2026-06-01 18:31:56 +03:00
c4a8a9babf Add PE detection rule for ImGui DosX 2026-06-01 18:31:54 +03:00
f67dd4bad2 Create media_ASF_WMA_WMV.1.sg Kaens 2026-06-01 02:57:14 +02:00
e12e38e589 Add detection for Valve Linker DosX 2026-06-01 00:56:12 +03:00
9993ee4e2d Use .rdata section size for signature detection DosX 2026-06-01 00:17:11 +03:00
ae40acf032 dbs_min update DosX 2026-06-01 00:05:03 +03:00
5534e01b37 Add .htext to Helios packer signature DosX 2026-05-31 06:22:08 +03:00
615f15c08c Merge branch 'master' of https://github.com/horsicq/Detect-It-Easy DosX 2026-05-30 18:22:20 +03:00
8eab1f7938 Add Detect It Easy rule for Astral-PE DosX 2026-05-30 18:22:18 +03:00
2f099b18ad dbs_min update Benjamin Funke 2026-05-30 14:51:48 +02:00
a0d9fd8299 add InstallAware signature Benjamin Funke 2026-05-30 11:23:14 +02:00
56084e392e add LÖVE game engine signature Benjamin Funke 2026-05-29 17:57:33 +02:00
00278adb83 dbs_min update DosX 2026-05-28 23:50:00 +03:00
e6f56fd165 Merge branch 'master' of https://github.com/horsicq/Detect-It-Easy DosX 2026-05-28 23:49:19 +03:00
3499d9a63f Add Helios (.helios) to packer heuristics DosX 2026-05-28 23:49:16 +03:00
782d8f4128 add ProductName detection for AGS Benjamin Funke 2026-05-28 16:06:21 +02:00
442029ed1a add sVersion to AGS signature Benjamin Funke 2026-05-28 16:01:14 +02:00
0a9b94d2d0 dbs_min update DosX 2026-05-28 00:02:40 +03:00
9148133bf8 Delete db.json DosX 2026-05-28 00:00:23 +03:00