Skip to content

Commit cefc47a

Browse files
github-actions[bot]github-actions[bot]
committed
chore: update feeds 2026-04-20
1 parent e48c7ba commit cefc47a

11 files changed

Lines changed: 18396 additions & 18396 deletions

‎feeds/elastic_threat_intel.ndjson‎

Lines changed: 1882 additions & 1882 deletions
Large diffs are not rendered by default.

‎feeds/extsentry_feed.json‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"feed_name": "ExtSentry - Browser Extension Threat Intelligence",
33
"feed_version": "1.0",
4-
"generated": "2026-04-19T23:20:18Z",
4+
"generated": "2026-04-20T01:09:07Z",
55
"source": "https://github.com/mthcht/awesome-lists",
66
"license": "TLP:CLEAR",
77
"total_indicators": 1882,

‎feeds/extsentry_ioc_feed.csv‎

Lines changed: 1882 additions & 1882 deletions
Large diffs are not rendered by default.

‎feeds/misp_event.json‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -4,8 +4,8 @@
44
"threat_level_id": "2",
55
"analysis": "2",
66
"distribution": "3",
7-
"date": "2026-04-19",
8-
"timestamp": "1776640818",
7+
"date": "2026-04-20",
8+
"timestamp": "1776647347",
99
"published": false,
1010
"uuid": "41ef2090-fab5-547e-9eb6-2aa8f195c66f",
1111
"Orgc": {

‎feeds/misp_warninglist.json‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
{
22
"name": "ExtSentry - Known Malicious/Suspicious Browser Extension IDs",
3-
"version": 20260419,
3+
"version": 20260420,
44
"description": "List of known malicious, suspicious, and potentially unwanted browser extension IDs. Maintained by mthcht.",
55
"type": "string",
66
"matching_attributes": [

‎feeds/opencti_import.csv‎

Lines changed: 1882 additions & 1882 deletions
Large diffs are not rendered by default.

‎feeds/openioc_browser_extensions.ioc‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,8 +1,8 @@
11
<?xml version="1.0" ?>
2-
<ioc xmlns="http://schemas.mandiant.com/2010/ioc" id="3678fd2f-03b8-5532-a002-c96e7c7abd1e" last-modified="2026-04-19T23:20:18Z">
2+
<ioc xmlns="http://schemas.mandiant.com/2010/ioc" id="3678fd2f-03b8-5532-a002-c96e7c7abd1e" last-modified="2026-04-20T01:09:07Z">
33
<short_description>ExtSentry - Malicious Browser Extension IOCs</short_description>
44
<description>Browser extension IDs flagged as malicious/suspicious. Matches extension IDs in file paths and registry entries. Source: github.com/mthcht/awesome-lists</description>
5-
<authored_date>2026-04-19T23:20:18Z</authored_date>
5+
<authored_date>2026-04-20T01:09:07Z</authored_date>
66
<definition>
77
<Indicator operator="OR" id="5fd27988-48b0-53ea-88c2-7e57099fd433">
88
<IndicatorItem id="9c4f20d9-4216-5779-b653-c9b704e3e0a5" condition="contains">

‎feeds/sentinel_analytics_rule.kql‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
// ExtSentry - Browser Extension Threat Detection for Microsoft Sentinel
22
// Source: https://github.com/mthcht/awesome-lists
3-
// Generated: 2026-04-19T23:20:18Z
3+
// Generated: 2026-04-20T01:09:07Z
44
// Total extension IDs: 1882 in 10 chunks
55
//
66
// RECOMMENDATION: For production, import the IOC list as a Sentinel Watchlist

‎feeds/sigma_rules_browser_extensions.yml‎

Lines changed: 28 additions & 28 deletions
Original file line numberDiff line numberDiff line change
@@ -8,8 +8,8 @@ description: |
88
references:
99
- https://github.com/mthcht/awesome-lists
1010
author: ExtSentry / mthcht
11-
date: 2026-04-19
12-
modified: 2026-04-19
11+
date: 2026-04-20
12+
modified: 2026-04-20
1313
tags:
1414
- attack.persistence
1515
- attack.t1176
@@ -1917,8 +1917,8 @@ description: |
19171917
references:
19181918
- https://github.com/mthcht/awesome-lists
19191919
author: ExtSentry / mthcht
1920-
date: 2026-04-19
1921-
modified: 2026-04-19
1920+
date: 2026-04-20
1921+
modified: 2026-04-20
19221922
tags:
19231923
- attack.persistence
19241924
- attack.t1176
@@ -3825,8 +3825,8 @@ description: |
38253825
references:
38263826
- https://github.com/mthcht/awesome-lists
38273827
author: ExtSentry / mthcht
3828-
date: 2026-04-19
3829-
modified: 2026-04-19
3828+
date: 2026-04-20
3829+
modified: 2026-04-20
38303830
tags:
38313831
- attack.persistence
38323832
- attack.t1176
@@ -5730,8 +5730,8 @@ description: Detects browser extensions categorized as 'malware' in the ExtSentr
57305730
references:
57315731
- https://github.com/mthcht/awesome-lists
57325732
author: ExtSentry / mthcht
5733-
date: 2026-04-19
5734-
modified: 2026-04-19
5733+
date: 2026-04-20
5734+
modified: 2026-04-20
57355735
tags:
57365736
- attack.persistence
57375737
- attack.t1176
@@ -7425,8 +7425,8 @@ description: Detects browser extensions categorized as 'PUP' in the ExtSentry fe
74257425
references:
74267426
- https://github.com/mthcht/awesome-lists
74277427
author: ExtSentry / mthcht
7428-
date: 2026-04-19
7429-
modified: 2026-04-19
7428+
date: 2026-04-20
7429+
modified: 2026-04-20
74307430
tags:
74317431
- attack.persistence
74327432
- attack.t1176
@@ -7453,8 +7453,8 @@ description: Detects browser extensions categorized as 'compromised' in the ExtS
74537453
references:
74547454
- https://github.com/mthcht/awesome-lists
74557455
author: ExtSentry / mthcht
7456-
date: 2026-04-19
7457-
modified: 2026-04-19
7456+
date: 2026-04-20
7457+
modified: 2026-04-20
74587458
tags:
74597459
- attack.persistence
74607460
- attack.t1176
@@ -7568,8 +7568,8 @@ description: Detects browser extensions categorized as 'cryptocurrency' in the E
75687568
references:
75697569
- https://github.com/mthcht/awesome-lists
75707570
author: ExtSentry / mthcht
7571-
date: 2026-04-19
7572-
modified: 2026-04-19
7571+
date: 2026-04-20
7572+
modified: 2026-04-20
75737573
tags:
75747574
- attack.persistence
75757575
- attack.t1176
@@ -7681,8 +7681,8 @@ description: Detects browser extensions categorized as 'Credential Access' in th
76817681
references:
76827682
- https://github.com/mthcht/awesome-lists
76837683
author: ExtSentry / mthcht
7684-
date: 2026-04-19
7685-
modified: 2026-04-19
7684+
date: 2026-04-20
7685+
modified: 2026-04-20
76867686
tags:
76877687
- attack.persistence
76887688
- attack.t1176
@@ -7706,8 +7706,8 @@ description: Detects browser extensions categorized as 'Defense Evasion' in the
77067706
references:
77077707
- https://github.com/mthcht/awesome-lists
77087708
author: ExtSentry / mthcht
7709-
date: 2026-04-19
7710-
modified: 2026-04-19
7709+
date: 2026-04-20
7710+
modified: 2026-04-20
77117711
tags:
77127712
- attack.persistence
77137713
- attack.t1176
@@ -7730,8 +7730,8 @@ description: Detects browser extensions categorized as 'scam' in the ExtSentry f
77307730
references:
77317731
- https://github.com/mthcht/awesome-lists
77327732
author: ExtSentry / mthcht
7733-
date: 2026-04-19
7734-
modified: 2026-04-19
7733+
date: 2026-04-20
7734+
modified: 2026-04-20
77357735
tags:
77367736
- attack.persistence
77377737
- attack.t1176
@@ -7758,8 +7758,8 @@ description: Detects browser extensions categorized as 'RMM' in the ExtSentry fe
77587758
references:
77597759
- https://github.com/mthcht/awesome-lists
77607760
author: ExtSentry / mthcht
7761-
date: 2026-04-19
7762-
modified: 2026-04-19
7761+
date: 2026-04-20
7762+
modified: 2026-04-20
77637763
tags:
77647764
- attack.persistence
77657765
- attack.t1176
@@ -7782,8 +7782,8 @@ description: Detects browser extensions categorized as 'password manager' in the
77827782
references:
77837783
- https://github.com/mthcht/awesome-lists
77847784
author: ExtSentry / mthcht
7785-
date: 2026-04-19
7786-
modified: 2026-04-19
7785+
date: 2026-04-20
7786+
modified: 2026-04-20
77877787
tags:
77887788
- attack.persistence
77897789
- attack.t1176
@@ -7814,8 +7814,8 @@ description: Detects browser extensions categorized as 'PROXY/VPN' in the ExtSen
78147814
references:
78157815
- https://github.com/mthcht/awesome-lists
78167816
author: ExtSentry / mthcht
7817-
date: 2026-04-19
7818-
modified: 2026-04-19
7817+
date: 2026-04-20
7818+
modified: 2026-04-20
78197819
tags:
78207820
- attack.persistence
78217821
- attack.t1176
@@ -7844,8 +7844,8 @@ description: |
78447844
references:
78457845
- https://github.com/mthcht/awesome-lists
78467846
author: ExtSentry
7847-
date: 2026-04-19
7848-
modified: 2026-04-19
7847+
date: 2026-04-20
7848+
modified: 2026-04-20
78497849
tags:
78507850
- attack.persistence
78517851
- attack.t1176

0 commit comments

Comments
 (0)