Skip to content

Commit 2c82dbf

Browse files
github-actions[bot]github-actions[bot]
committed
chore: update feeds 2026-04-24
1 parent 9b7384e commit 2c82dbf

11 files changed

Lines changed: 18366 additions & 18366 deletions

‎feeds/elastic_threat_intel.ndjson‎

Lines changed: 1879 additions & 1879 deletions
Large diffs are not rendered by default.

‎feeds/extsentry_feed.json‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"feed_name": "ExtSentry - Browser Extension Threat Intelligence",
33
"feed_version": "1.0",
4-
"generated": "2026-04-23T23:29:17Z",
4+
"generated": "2026-04-24T01:12:25Z",
55
"source": "https://github.com/mthcht/awesome-lists",
66
"license": "TLP:CLEAR",
77
"total_indicators": 1879,

‎feeds/extsentry_ioc_feed.csv‎

Lines changed: 1879 additions & 1879 deletions
Large diffs are not rendered by default.

‎feeds/misp_event.json‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -4,8 +4,8 @@
44
"threat_level_id": "2",
55
"analysis": "2",
66
"distribution": "3",
7-
"date": "2026-04-23",
8-
"timestamp": "1776986958",
7+
"date": "2026-04-24",
8+
"timestamp": "1776993145",
99
"published": false,
1010
"uuid": "41ef2090-fab5-547e-9eb6-2aa8f195c66f",
1111
"Orgc": {

‎feeds/misp_warninglist.json‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
{
22
"name": "ExtSentry - Known Malicious/Suspicious Browser Extension IDs",
3-
"version": 20260423,
3+
"version": 20260424,
44
"description": "List of known malicious, suspicious, and potentially unwanted browser extension IDs. Maintained by mthcht.",
55
"type": "string",
66
"matching_attributes": [

‎feeds/opencti_import.csv‎

Lines changed: 1879 additions & 1879 deletions
Large diffs are not rendered by default.

‎feeds/openioc_browser_extensions.ioc‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,8 +1,8 @@
11
<?xml version="1.0" ?>
2-
<ioc xmlns="http://schemas.mandiant.com/2010/ioc" id="3678fd2f-03b8-5532-a002-c96e7c7abd1e" last-modified="2026-04-23T23:29:17Z">
2+
<ioc xmlns="http://schemas.mandiant.com/2010/ioc" id="3678fd2f-03b8-5532-a002-c96e7c7abd1e" last-modified="2026-04-24T01:12:25Z">
33
<short_description>ExtSentry - Malicious Browser Extension IOCs</short_description>
44
<description>Browser extension IDs flagged as malicious/suspicious. Matches extension IDs in file paths and registry entries. Source: github.com/mthcht/awesome-lists</description>
5-
<authored_date>2026-04-23T23:29:17Z</authored_date>
5+
<authored_date>2026-04-24T01:12:25Z</authored_date>
66
<definition>
77
<Indicator operator="OR" id="5fd27988-48b0-53ea-88c2-7e57099fd433">
88
<IndicatorItem id="9c4f20d9-4216-5779-b653-c9b704e3e0a5" condition="contains">

‎feeds/sentinel_analytics_rule.kql‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
// ExtSentry - Browser Extension Threat Detection for Microsoft Sentinel
22
// Source: https://github.com/mthcht/awesome-lists
3-
// Generated: 2026-04-23T23:29:17Z
3+
// Generated: 2026-04-24T01:12:25Z
44
// Total extension IDs: 1879 in 10 chunks
55
//
66
// RECOMMENDATION: For production, import the IOC list as a Sentinel Watchlist

‎feeds/sigma_rules_browser_extensions.yml‎

Lines changed: 28 additions & 28 deletions
Original file line numberDiff line numberDiff line change
@@ -8,8 +8,8 @@ description: |
88
references:
99
- https://github.com/mthcht/awesome-lists
1010
author: ExtSentry / mthcht
11-
date: 2026-04-23
12-
modified: 2026-04-23
11+
date: 2026-04-24
12+
modified: 2026-04-24
1313
tags:
1414
- attack.persistence
1515
- attack.t1176
@@ -1914,8 +1914,8 @@ description: |
19141914
references:
19151915
- https://github.com/mthcht/awesome-lists
19161916
author: ExtSentry / mthcht
1917-
date: 2026-04-23
1918-
modified: 2026-04-23
1917+
date: 2026-04-24
1918+
modified: 2026-04-24
19191919
tags:
19201920
- attack.persistence
19211921
- attack.t1176
@@ -3819,8 +3819,8 @@ description: |
38193819
references:
38203820
- https://github.com/mthcht/awesome-lists
38213821
author: ExtSentry / mthcht
3822-
date: 2026-04-23
3823-
modified: 2026-04-23
3822+
date: 2026-04-24
3823+
modified: 2026-04-24
38243824
tags:
38253825
- attack.persistence
38263826
- attack.t1176
@@ -5721,8 +5721,8 @@ description: Detects browser extensions categorized as 'malware' in the ExtSentr
57215721
references:
57225722
- https://github.com/mthcht/awesome-lists
57235723
author: ExtSentry / mthcht
5724-
date: 2026-04-23
5725-
modified: 2026-04-23
5724+
date: 2026-04-24
5725+
modified: 2026-04-24
57265726
tags:
57275727
- attack.persistence
57285728
- attack.t1176
@@ -7413,8 +7413,8 @@ description: Detects browser extensions categorized as 'PUP' in the ExtSentry fe
74137413
references:
74147414
- https://github.com/mthcht/awesome-lists
74157415
author: ExtSentry / mthcht
7416-
date: 2026-04-23
7417-
modified: 2026-04-23
7416+
date: 2026-04-24
7417+
modified: 2026-04-24
74187418
tags:
74197419
- attack.persistence
74207420
- attack.t1176
@@ -7441,8 +7441,8 @@ description: Detects browser extensions categorized as 'compromised' in the ExtS
74417441
references:
74427442
- https://github.com/mthcht/awesome-lists
74437443
author: ExtSentry / mthcht
7444-
date: 2026-04-23
7445-
modified: 2026-04-23
7444+
date: 2026-04-24
7445+
modified: 2026-04-24
74467446
tags:
74477447
- attack.persistence
74487448
- attack.t1176
@@ -7556,8 +7556,8 @@ description: Detects browser extensions categorized as 'cryptocurrency' in the E
75567556
references:
75577557
- https://github.com/mthcht/awesome-lists
75587558
author: ExtSentry / mthcht
7559-
date: 2026-04-23
7560-
modified: 2026-04-23
7559+
date: 2026-04-24
7560+
modified: 2026-04-24
75617561
tags:
75627562
- attack.persistence
75637563
- attack.t1176
@@ -7669,8 +7669,8 @@ description: Detects browser extensions categorized as 'Credential Access' in th
76697669
references:
76707670
- https://github.com/mthcht/awesome-lists
76717671
author: ExtSentry / mthcht
7672-
date: 2026-04-23
7673-
modified: 2026-04-23
7672+
date: 2026-04-24
7673+
modified: 2026-04-24
76747674
tags:
76757675
- attack.persistence
76767676
- attack.t1176
@@ -7694,8 +7694,8 @@ description: Detects browser extensions categorized as 'Defense Evasion' in the
76947694
references:
76957695
- https://github.com/mthcht/awesome-lists
76967696
author: ExtSentry / mthcht
7697-
date: 2026-04-23
7698-
modified: 2026-04-23
7697+
date: 2026-04-24
7698+
modified: 2026-04-24
76997699
tags:
77007700
- attack.persistence
77017701
- attack.t1176
@@ -7718,8 +7718,8 @@ description: Detects browser extensions categorized as 'scam' in the ExtSentry f
77187718
references:
77197719
- https://github.com/mthcht/awesome-lists
77207720
author: ExtSentry / mthcht
7721-
date: 2026-04-23
7722-
modified: 2026-04-23
7721+
date: 2026-04-24
7722+
modified: 2026-04-24
77237723
tags:
77247724
- attack.persistence
77257725
- attack.t1176
@@ -7746,8 +7746,8 @@ description: Detects browser extensions categorized as 'RMM' in the ExtSentry fe
77467746
references:
77477747
- https://github.com/mthcht/awesome-lists
77487748
author: ExtSentry / mthcht
7749-
date: 2026-04-23
7750-
modified: 2026-04-23
7749+
date: 2026-04-24
7750+
modified: 2026-04-24
77517751
tags:
77527752
- attack.persistence
77537753
- attack.t1176
@@ -7770,8 +7770,8 @@ description: Detects browser extensions categorized as 'password manager' in the
77707770
references:
77717771
- https://github.com/mthcht/awesome-lists
77727772
author: ExtSentry / mthcht
7773-
date: 2026-04-23
7774-
modified: 2026-04-23
7773+
date: 2026-04-24
7774+
modified: 2026-04-24
77757775
tags:
77767776
- attack.persistence
77777777
- attack.t1176
@@ -7802,8 +7802,8 @@ description: Detects browser extensions categorized as 'PROXY/VPN' in the ExtSen
78027802
references:
78037803
- https://github.com/mthcht/awesome-lists
78047804
author: ExtSentry / mthcht
7805-
date: 2026-04-23
7806-
modified: 2026-04-23
7805+
date: 2026-04-24
7806+
modified: 2026-04-24
78077807
tags:
78087808
- attack.persistence
78097809
- attack.t1176
@@ -7832,8 +7832,8 @@ description: |
78327832
references:
78337833
- https://github.com/mthcht/awesome-lists
78347834
author: ExtSentry
7835-
date: 2026-04-23
7836-
modified: 2026-04-23
7835+
date: 2026-04-24
7836+
modified: 2026-04-24
78377837
tags:
78387838
- attack.persistence
78397839
- attack.t1176

0 commit comments

Comments
 (0)